Unrated severityNVD Advisory· Published Apr 25, 2007· Updated Jun 16, 2026

CVE-2007-2248

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phorum/Phorum2 versions
cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*range: <=5.1.21
- (no CPE)range: <5.1.22

Patches

Vulnerability mechanics

References

www.phorum.org/story.phpnvdPatch
secunia.com/advisories/24932nvdExploitPatchVendor Advisory
www.securityfocus.com/bid/23616nvdExploitPatch
www.securitytracker.com/idnvdExploitPatchVendor Advisory
www.waraxe.us/advisory-49.htmlnvdExploitPatchVendor Advisory
osvdb.org/35057nvd
osvdb.org/35058nvd
securityreason.com/securityalert/2617nvd
www.securityfocus.com/archive/1/466286/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000