NetSight
IP …
medium4.3

CVE-2005-2836

Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the use…

Impact

Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," which is not properly handled by control.php.

Affected products

VendorProductAffected versions
PhorumPhorum
Versions 3.1, 3.1.1, 3.1.1_pre, 3.1.1_rc2, 3.1.1a, 3.1.2

References