Strix
26.1K

CVE-2004-1822

UnknownEPSS 2.52%

Last modified

CVE-2004-1822 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.. EPSS estimates a 2.52% chance of exploitation in the next 30 days.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.

Metrics

EPSS Probability
2.52%

82.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
PhorumPhorum3.1
PhorumPhorum3.1.1
PhorumPhorum3.1.1_pre
PhorumPhorum3.1.1_rc2
PhorumPhorum3.1.1a
PhorumPhorum3.1.2
PhorumPhorum3.2
PhorumPhorum3.2.2
PhorumPhorum3.2.3
PhorumPhorum3.2.3a
PhorumPhorum3.2.3b
PhorumPhorum3.2.4
PhorumPhorum3.2.5
PhorumPhorum3.2.6
PhorumPhorum3.2.7
PhorumPhorum3.2.8
PhorumPhorum3.3.1
PhorumPhorum3.3.1a
PhorumPhorum3.3.2
PhorumPhorum3.3.2a
PhorumPhorum3.3.2b3
PhorumPhorum3.4
PhorumPhorum3.4.1
PhorumPhorum3.4.2
PhorumPhorum3.4.3
PhorumPhorum3.4.4
PhorumPhorum3.4.5
PhorumPhorum3.4.6
PhorumPhorum5.0.3_beta

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2004-1822?
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.
How severe is CVE-2004-1822?
Severity scoring for CVE-2004-1822 is pending analysis. The EPSS model estimates a 2.52% probability of exploitation in the next 30 days.
How do I fix CVE-2004-1822?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-1822?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST