CVE-2009-0488 Detail

CVE-2009-0488

CVE Descriptions

Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	[email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Phorum>>Phorum >> Version To (including) 5.2.10

Phorum>>Phorum >> Version 5.2.3 (Open CPE detail)
Phorum>>Phorum >> Version 5.2.10 (Open CPE detail)

Phorum>>Phorum >> Version 3.0.7

Phorum>>Phorum >> Version 3.0.7 (Open CPE detail)

Phorum>>Phorum >> Version 3.1

Phorum>>Phorum >> Version 3.1 (Open CPE detail)

Phorum>>Phorum >> Version 3.1.1

Phorum>>Phorum >> Version 3.1.1 (Open CPE detail)
Phorum>>Phorum >> Version 3.1.1 (Open CPE detail)
Phorum>>Phorum >> Version 3.1.1 (Open CPE detail)
Phorum>>Phorum >> Version 3.1.1 (Open CPE detail)

Phorum>>Phorum >> Version 3.1.1_pre

Phorum>>Phorum >> Version 3.1.1_rc2

Phorum>>Phorum >> Version 3.1.1a

Phorum>>Phorum >> Version 3.1.2

Phorum>>Phorum >> Version 3.1.2 (Open CPE detail)

Phorum>>Phorum >> Version 3.2

Phorum>>Phorum >> Version 3.2 (Open CPE detail)

Phorum>>Phorum >> Version 3.2.2

Phorum>>Phorum >> Version 3.2.2 (Open CPE detail)

Phorum>>Phorum >> Version 3.2.3

Phorum>>Phorum >> Version 3.2.3 (Open CPE detail)
Phorum>>Phorum >> Version 3.2.3 (Open CPE detail)
Phorum>>Phorum >> Version 3.2.3 (Open CPE detail)

Phorum>>Phorum >> Version 3.2.3a

Phorum>>Phorum >> Version 3.2.3b

Phorum>>Phorum >> Version 3.2.4

Phorum>>Phorum >> Version 3.2.4 (Open CPE detail)

Phorum>>Phorum >> Version 3.2.5

Phorum>>Phorum >> Version 3.2.5 (Open CPE detail)

Phorum>>Phorum >> Version 3.2.6

Phorum>>Phorum >> Version 3.2.6 (Open CPE detail)

Phorum>>Phorum >> Version 3.2.7

Phorum>>Phorum >> Version 3.2.7 (Open CPE detail)

Phorum>>Phorum >> Version 3.2.8

Phorum>>Phorum >> Version 3.2.8 (Open CPE detail)

Phorum>>Phorum >> Version 3.3.1

Phorum>>Phorum >> Version 3.3.1 (Open CPE detail)
Phorum>>Phorum >> Version 3.3.1 (Open CPE detail)

Phorum>>Phorum >> Version 3.3.1a

Phorum>>Phorum >> Version 3.3.2

Phorum>>Phorum >> Version 3.3.2 (Open CPE detail)
Phorum>>Phorum >> Version 3.3.2 (Open CPE detail)
Phorum>>Phorum >> Version 3.3.2 (Open CPE detail)

Phorum>>Phorum >> Version 3.3.2a

Phorum>>Phorum >> Version 3.3.2b3

Phorum>>Phorum >> Version 3.4

Phorum>>Phorum >> Version 3.4 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.1

Phorum>>Phorum >> Version 3.4.1 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.2

Phorum>>Phorum >> Version 3.4.2 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.3

Phorum>>Phorum >> Version 3.4.3 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.4

Phorum>>Phorum >> Version 3.4.4 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.5

Phorum>>Phorum >> Version 3.4.5 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.6

Phorum>>Phorum >> Version 3.4.6 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.7

Phorum>>Phorum >> Version 3.4.7 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.8

Phorum>>Phorum >> Version 3.4.8 (Open CPE detail)
Phorum>>Phorum >> Version 3.4.8 (Open CPE detail)

Phorum>>Phorum >> Version 3.4.8a

Phorum>>Phorum >> Version 4.3.7

Phorum>>Phorum >> Version 4.3.7 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.0_alpha

Phorum>>Phorum >> Version 5.0.1_alpha

Phorum>>Phorum >> Version 5.0.2_alpha

Phorum>>Phorum >> Version 5.0.3_beta

Phorum>>Phorum >> Version 5.0.4_beta

Phorum>>Phorum >> Version 5.0.4a_beta

Phorum>>Phorum >> Version 5.0.5_beta

Phorum>>Phorum >> Version 5.0.6_beta

Phorum>>Phorum >> Version 5.0.7_beta

Phorum>>Phorum >> Version 5.0.7a_beta

Phorum>>Phorum >> Version 5.0.8_rc

Phorum>>Phorum >> Version 5.0.9

Phorum>>Phorum >> Version 5.0.9 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.10

Phorum>>Phorum >> Version 5.0.10 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.11

Phorum>>Phorum >> Version 5.0.11 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.12

Phorum>>Phorum >> Version 5.0.12 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.13

Phorum>>Phorum >> Version 5.0.13 (Open CPE detail)
Phorum>>Phorum >> Version 5.0.13 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.13a

Phorum>>Phorum >> Version 5.0.14

Phorum>>Phorum >> Version 5.0.14 (Open CPE detail)
Phorum>>Phorum >> Version 5.0.14 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.14a

Phorum>>Phorum >> Version 5.0.15

Phorum>>Phorum >> Version 5.0.15 (Open CPE detail)
Phorum>>Phorum >> Version 5.0.15 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.15a

Phorum>>Phorum >> Version 5.0.16

Phorum>>Phorum >> Version 5.0.16 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.17

Phorum>>Phorum >> Version 5.0.17 (Open CPE detail)
Phorum>>Phorum >> Version 5.0.17 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.17a

Phorum>>Phorum >> Version 5.0.18

Phorum>>Phorum >> Version 5.0.18 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.19

Phorum>>Phorum >> Version 5.0.19 (Open CPE detail)

Phorum>>Phorum >> Version 5.0.20

Phorum>>Phorum >> Version 5.0.20 (Open CPE detail)

Phorum>>Phorum >> Version 5.1.13

Phorum>>Phorum >> Version 5.1.13 (Open CPE detail)

Phorum>>Phorum >> Version 5.1.14

Phorum>>Phorum >> Version 5.1.14 (Open CPE detail)

Phorum>>Phorum >> Version 5.1.17

Phorum>>Phorum >> Version 5.1.17 (Open CPE detail)

Phorum>>Phorum >> Version 5.1.18

Phorum>>Phorum >> Version 5.1.18 (Open CPE detail)

Phorum>>Phorum >> Version 5.1.20

Phorum>>Phorum >> Version 5.1.20 (Open CPE detail)

Phorum>>Phorum >> Version 5.1.21

Phorum>>Phorum >> Version 5.1.21 (Open CPE detail)

Phorum>>Phorum >> Version 5.1.25

Phorum>>Phorum >> Version 5.1.25 (Open CPE detail)

Phorum>>Phorum >> Version 5.2

Phorum>>Phorum >> Version 5.2 (Open CPE detail)

Phorum>>Phorum >> Version 5.2.1

Phorum>>Phorum >> Version 5.2.1 (Open CPE detail)

Phorum>>Phorum >> Version 5.2.2

Phorum>>Phorum >> Version 5.2.2 (Open CPE detail)

Phorum>>Phorum >> Version 5.2.3

Phorum>>Phorum >> Version 5.2.3 (Open CPE detail)

Phorum>>Phorum >> Version 5.2.4

Phorum>>Phorum >> Version 5.2.4 (Open CPE detail)

Phorum>>Phorum >> Version 5.2.5

Phorum>>Phorum >> Version 5.2.5 (Open CPE detail)

Phorum>>Phorum >> Version 5.2.8

Phorum>>Phorum >> Version 5.2.8 (Open CPE detail)

Phorum>>Phorum >> Version 5.2.9

Phorum>>Phorum >> Version 5.2.9 (Open CPE detail)

References

http://www.securityfocus.com/bid/33657
Tags : vdb-entry, x_refsource_BID

http://www.phorum.org/phorum5/read.php?64%2C136129
Tags : x_refsource_CONFIRM

CVE-2009-0488 : Detail