Phorum 5.2.8

CPE Details

Phorum 5.2.8
phorum
phorum
5.2.8
2008-10-09
17h12 +00:00
2012-02-10
17h53 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:phorum:phorum:5.2.8:*:*:*:*:*:*:*

Informations

Vendor

phorum

Product

phorum

Version

5.2.8

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2011-3622 2020-01-22 18h48 +00:00 A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18.
6.1
Medium
CVE-2012-6659 2014-09-19 14h00 +00:00 Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
4.3
CVE-2012-4234 2014-09-04 12h00 +00:00 Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter.
4.3
CVE-2011-3381 2011-09-08 18h00 +00:00 Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
6.8
CVE-2011-3382 2011-09-08 18h00 +00:00 Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVE-2011-3392 2011-09-08 16h00 +00:00 Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter.
4.3
CVE-2010-1629 2010-05-19 20h00 +00:00 Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address.
4.3
CVE-2009-0488 2009-02-09 19h00 +00:00 Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVE-2008-4513 2008-10-09 14h00 +00:00 Cross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags.
4.3
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.