JVNDB-2006-000627

[Japanese]
JVNDB-2006-000627
Phorum cross-site scripting vulnerability
Overview
Phorum, an open source message board system, contains a cross-site scripting vulnerability.
CVSS Severity (What is CVSS?)
CVSS V2 Severity: Base Metrics 4.3 (Medium) [IPA Score] Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
Affected Products

Phorum Phorum 5.1.13 and earlier

Impact
An arbitrary script may be executed on the user's web browser.
Solution

Vendor Information
Phorum Phorum : Top Page
CWE (What is CWE?)

CVE (What is CVE?)

References
JVN : JVN#76207423
Revision History
[2008/05/21] Web page published

Phorum cross-site scripting vulnerability