CVE-2003-0283

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-06-16 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.

Affected products

Phorum: through 3.4.3

References

http://marc.info/?l=bugtraq&m=105251043821533&w=2
http://marc.info/?l=bugtraq&m=105251421925394&w=2
http://www.securityfocus.com/bid/7545
https://exchange.xforce.ibmcloud.com/vulnerabilities/11974
http://marc.info/?l=bugtraq&m=105251043821533&w=2
http://marc.info/?l=bugtraq&m=105251421925394&w=2
http://www.securityfocus.com/bid/7545
https://exchange.xforce.ibmcloud.com/vulnerabilities/11974

Get alerted when CVE-2003-0283 or the next vulnerability affects your stack