CVE-2004-1822

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-03-15 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.

Affected products

Phorum: 3.1, 3.1.1, 3.1.1_pre, 3.1.1_rc2, 3.1.1a, 3.1.2 (+23)

References

http://marc.info/?l=bugtraq&m=107939479713136&w=2
http://phorum.org/changelog.txt
http://secunia.com/advisories/11157
http://securitytracker.com/id?1009433
http://www.osvdb.org/4333
http://www.osvdb.org/4334
http://www.osvdb.org/4335
http://www.securityfocus.com/bid/9882
https://exchange.xforce.ibmcloud.com/vulnerabilities/15494
http://marc.info/?l=bugtraq&m=107939479713136&w=2
http://phorum.org/changelog.txt
http://secunia.com/advisories/11157

Get alerted when CVE-2004-1822 or the next vulnerability affects your stack