Lucene search

MitreCVE-2002-2340

HistoryOct 29, 2007 - 7:00 p.m.

CVE-2002-2340

2007-10-2919:00:00

CWE-79

mitre

web.nvd.nist.gov

134

security

vulnerability

xss

phorum

remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.003

Percentile

66.2%

JSON

Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response.

Affected configurations

Nvd

Node

phorumphorumMatch3.3.2a

VendorProductVersionCPE
phorumphorum3.3.2acpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phorum	phorum	3.3.2a	cpe:2.3:a:phorum:phorum:3.3.2a:::::::*

References

marc.info/?l=vuln-dev&m=102121925428844&w=2

www.ifrance.com/kitetoua/tuto/5holes5.txt

www.phorum.org/changelog.txt

www.securityfocus.com/bid/4739

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.003

Percentile

66.2%

JSON

Related for CVE-2002-2340