4.3
CVSSv2

CVE-2004-2242

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and previous versions, allows remote malicious users to inject arbitrary HTML or web script via the subject parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

phorum phorum 5.0.7_beta

Exploits

source: wwwsecurityfocuscom/bid/10822/info A cross-site scripting vulnerability is reported to affect Phorum This issue affects the 'searchphp' script As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user This ...