Unrated severityNVD Advisory· Published Mar 15, 2004· Updated Apr 16, 2026
CVE-2004-1822
CVE-2004-1822
Description
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.
Affected products
29cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*+ 28 more
- cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.3a:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.3b:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.3.1a:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.3.2b3:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.4:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:3.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- secunia.com/advisories/11157nvdPatchVendor Advisory
- www.securityfocus.com/bid/9882nvdPatchVendor Advisory
- phorum.org/changelog.txtnvdVendor Advisory
- marc.infonvd
- securitytracker.com/idnvd
- www.osvdb.org/4333nvd
- www.osvdb.org/4334nvd
- www.osvdb.org/4335nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/15494nvd
News mentions
0No linked articles in our index yet.