CVEvulnerability
CVE-2012-4234
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter.
Affected configurations
• phorum phorum (<= 5.2.18)
• phorum phorum 5.2
• phorum phorum 5.2.1
• phorum phorum 5.2.10
• phorum phorum 5.2.11
• phorum phorum 5.2.12
• phorum phorum 5.2.13
• phorum phorum 5.2.14
• phorum phorum 5.2.15
• phorum phorum 5.2.16
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html Exploit
- http://packetstormsecurity.org/files/116057/Phorum-5.2.18-Cross-Site-Scripting.html Exploit
- http://secunia.com/advisories/50445 secunia.com
- http://www.phorum.org/phorum5/read.php?64%2C151943 www.phorum.org
- http://www.securityfocus.com/bid/55275 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78124 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23109 Exploit
- http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html Exploit
- http://packetstormsecurity.org/files/116057/Phorum-5.2.18-Cross-Site-Scripting.html Exploit
- http://secunia.com/advisories/50445 secunia.com
- http://www.phorum.org/phorum5/read.php?64%2C151943 www.phorum.org
- http://www.securityfocus.com/bid/55275 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78124 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23109 Exploit