4.3

CVE-2010-1629

Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phorum ≫ Phorum Version <= 5.2.14
Phorum ≫ Phorum Version 3.0.7
Phorum ≫ Phorum Version 3.1
Phorum ≫ Phorum Version 3.1.1
Phorum ≫ Phorum Version 3.1.1_pre
Phorum ≫ Phorum Version 3.1.1_rc2
Phorum ≫ Phorum Version 3.1.1a
Phorum ≫ Phorum Version 3.1.2
Phorum ≫ Phorum Version 3.2
Phorum ≫ Phorum Version 3.2.2
Phorum ≫ Phorum Version 3.2.3
Phorum ≫ Phorum Version 3.2.3a
Phorum ≫ Phorum Version 3.2.3b
Phorum ≫ Phorum Version 3.2.4
Phorum ≫ Phorum Version 3.2.5
Phorum ≫ Phorum Version 3.2.6
Phorum ≫ Phorum Version 3.2.7
Phorum ≫ Phorum Version 3.2.8
Phorum ≫ Phorum Version 3.3.1
Phorum ≫ Phorum Version 3.3.1a
Phorum ≫ Phorum Version 3.3.2
Phorum ≫ Phorum Version 3.3.2a
Phorum ≫ Phorum Version 3.3.2b3
Phorum ≫ Phorum Version 3.4
Phorum ≫ Phorum Version 3.4.1
Phorum ≫ Phorum Version 3.4.2
Phorum ≫ Phorum Version 3.4.3
Phorum ≫ Phorum Version 3.4.4
Phorum ≫ Phorum Version 3.4.5
Phorum ≫ Phorum Version 3.4.6
Phorum ≫ Phorum Version 3.4.7
Phorum ≫ Phorum Version 3.4.8
Phorum ≫ Phorum Version 3.4.8a
Phorum ≫ Phorum Version 4.3.7
Phorum ≫ Phorum Version 5.0.0_alpha
Phorum ≫ Phorum Version 5.0.1_alpha
Phorum ≫ Phorum Version 5.0.2_alpha
Phorum ≫ Phorum Version 5.0.3_beta
Phorum ≫ Phorum Version 5.0.4_beta
Phorum ≫ Phorum Version 5.0.4a_beta
Phorum ≫ Phorum Version 5.0.5_beta
Phorum ≫ Phorum Version 5.0.6_beta
Phorum ≫ Phorum Version 5.0.7_beta
Phorum ≫ Phorum Version 5.0.7a_beta
Phorum ≫ Phorum Version 5.0.8_rc
Phorum ≫ Phorum Version 5.0.9
Phorum ≫ Phorum Version 5.0.10
Phorum ≫ Phorum Version 5.0.11
Phorum ≫ Phorum Version 5.0.12
Phorum ≫ Phorum Version 5.0.13
Phorum ≫ Phorum Version 5.0.13a
Phorum ≫ Phorum Version 5.0.14
Phorum ≫ Phorum Version 5.0.14a
Phorum ≫ Phorum Version 5.0.15
Phorum ≫ Phorum Version 5.0.15a
Phorum ≫ Phorum Version 5.0.16
Phorum ≫ Phorum Version 5.0.17
Phorum ≫ Phorum Version 5.0.17a
Phorum ≫ Phorum Version 5.0.18
Phorum ≫ Phorum Version 5.0.19
Phorum ≫ Phorum Version 5.0.20
Phorum ≫ Phorum Version 5.1.13
Phorum ≫ Phorum Version 5.1.14
Phorum ≫ Phorum Version 5.1.17
Phorum ≫ Phorum Version 5.1.18
Phorum ≫ Phorum Version 5.1.20
Phorum ≫ Phorum Version 5.1.21
Phorum ≫ Phorum Version 5.1.25
Phorum ≫ Phorum Version 5.2
Phorum ≫ Phorum Version 5.2.1
Phorum ≫ Phorum Version 5.2.2 Update beta
Phorum ≫ Phorum Version 5.2.3 Update rc1
Phorum ≫ Phorum Version 5.2.4 Update rc2
Phorum ≫ Phorum Version 5.2.5
Phorum ≫ Phorum Version 5.2.8
Phorum ≫ Phorum Version 5.2.9
Phorum ≫ Phorum Version 5.2.10
Phorum ≫ Phorum Version 5.2.10 Update rc1
Phorum ≫ Phorum Version 5.2.11
Phorum ≫ Phorum Version 5.2.12
Phorum ≫ Phorum Version 5.2.12a
Phorum ≫ Phorum Version 5.2.13
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.03% 0.593
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://osvdb.org/64759
http://www.facebook.com/note.php?note_id=371190874581
Patch
http://www.openwall.com/lists/oss-security/2010/05/16/2
http://www.openwall.com/lists/oss-security/2010/05/18/11