← Zuruck zu CVEs
CVE-2012-4234
N/ABeschreibung
Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter.
CVE Details
CVSS v3.1 BewertungN/A
Veroffentlicht9/4/2014
Zuletzt geandert4/12/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
phorum:phorum
Schwachen (CWE)
CWE-79
Referenzen
http://secunia.com/advisories/50445(cve@mitre.org)
http://www.phorum.org/phorum5/read.php?64%2C151943(cve@mitre.org)
http://www.securityfocus.com/bid/55275(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/78124(cve@mitre.org)
https://www.htbridge.com/advisory/HTB23109(cve@mitre.org)
http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html(af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.org/files/116057/Phorum-5.2.18-Cross-Site-Scripting.html(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/50445(af854a3a-2127-422b-91ae-364da2661108)
http://www.phorum.org/phorum5/read.php?64%2C151943(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/55275(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/78124(af854a3a-2127-422b-91ae-364da2661108)
https://www.htbridge.com/advisory/HTB23109(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.