| Package | Affected versions | Patched versions |
|---|---|---|
| phorum | = 3.1= 3.1.1= 3.1.1_pre= 3.1.1_rc2= 3.1.1a= 3.1.2= 3.2= 3.2.2= 3.2.3= 3.2.3a= 3.2.3b= 3.2.4= 3.2.5= 3.2.6= 3.2.7= 3.2.8= 3.3.1= 3.3.1a= 3.3.2= 3.3.2a= 3.3.2b3= 3.4= 3.4.1= 3.4.2= 3.4.3= 3.4.4= 3.4.5= 3.4.6= 3.4.7= 3.4.8= 4.3.7= 5.0.10= 5.0.11= 5.0.12= 5.0.14= 5.0.14a= 5.0.15= 5.0.16= 5.0.17= 5.0.3_beta= 5.0.7_beta= 5.0.9 |
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," which is not properly handled by control.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free