Phorum: >> Phorum >> 5.0.7_beta Security Vulnerabilities
SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter.
CVSS Score
4.6
EPSS Score
0.006
Published
2004-12-31
Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attackers to inject arbitrary HTML or web script via the subject parameter.
CVSS Score
4.3
EPSS Score
0.007
Published
2004-12-31
Page 2