CVE-2003-1467

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Affected products

Phorum: through 3.4.2; 3.4, 3.4.1

References

http://securityreason.com/securityalert/3288
http://www.securityfocus.com/archive/1/321310
http://www.securityfocus.com/bid/7572
http://www.securityfocus.com/bid/7573
http://www.securityfocus.com/bid/7576
http://www.securityfocus.com/bid/7577
http://www.securityfocus.com/bid/7584
https://exchange.xforce.ibmcloud.com/vulnerabilities/12487
https://exchange.xforce.ibmcloud.com/vulnerabilities/12502
http://securityreason.com/securityalert/3288
http://www.securityfocus.com/archive/1/321310
http://www.securityfocus.com/bid/7572

Get alerted when CVE-2003-1467 or the next vulnerability affects your stack