Detections
Analytics
CVE-2004-2241
medium
Description
Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor's patch.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/17846
http://www.securityfocus.com/bid/11538