4.3
CVSSv2

CVE-2005-0783

Published: 02/05/2005 Updated: 18/10/2016
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Phorum prior to 5.0.14a allows remote malicious users to inject arbitrary web script or HTML via the filename of an attached file.

Vulnerable Product Search on Vulmon Subscribe to Product

phorum phorum 5.0.14

Exploits

source: wwwsecurityfocuscom/bid/12800/info Phorum is reportedly affected by multiple HTML injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content The attacker-supplied HTML and script code would be able to access properties ...