{"id":"CVE-2003-1467","state":"PUBLISHED","title":"Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arb","description":"Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.","publishedAt":"2007-10-24T23:00:00.000Z","updatedAt":"2024-08-08T02:28:03.488Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/7572","http://www.securityfocus.com/bid/7576","http://www.securityfocus.com/bid/7573","http://securityreason.com/securityalert/3288","https://exchange.xforce.ibmcloud.com/vulnerabilities/12502","http://www.securityfocus.com/bid/7577","http://www.securityfocus.com/bid/7584","https://exchange.xforce.ibmcloud.com/vulnerabilities/12487","http://www.securityfocus.com/archive/1/321310"],"weaknesses":[],"ingestedAt":"2026-10-29T19:26:52.691Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2003/1xxx/CVE-2003-1467.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2003-1467","state":"PUBLISHED","datePublished":"2007-10-24T23:00:00.000Z","dateUpdated":"2024-08-08T02:28:03.488Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2007-10-24T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/7572","name":"7572","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securityfocus.com/bid/7576","name":"7576","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securityfocus.com/bid/7573","name":"7573","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://securityreason.com/securityalert/3288","name":"3288","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12502","name":"phorum-register-html-injection(12502)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/bid/7577","name":"7577","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securityfocus.com/bid/7584","name":"7584","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12487","name":"phorum-multiple-xss(12487)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/archive/1/321310","name":"20030513 Phorum Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2003-05-13T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2003-1467","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"7572","refsource":"BID","url":"http://www.securityfocus.com/bid/7572"},{"name":"7576","refsource":"BID","url":"http://www.securityfocus.com/bid/7576"},{"name":"7573","refsource":"BID","url":"http://www.securityfocus.com/bid/7573"},{"name":"3288","refsource":"SREASON","url":"http://securityreason.com/securityalert/3288"},{"name":"phorum-register-html-injection(12502)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12502"},{"name":"7577","refsource":"BID","url":"http://www.securityfocus.com/bid/7577"},{"name":"7584","refsource":"BID","url":"http://www.securityfocus.com/bid/7584"},{"name":"phorum-multiple-xss(12487)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12487"},{"name":"20030513 Phorum Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/321310"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/7572","name":"7572","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/7576","name":"7576","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/7573","name":"7573","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://securityreason.com/securityalert/3288","name":"3288","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12502","name":"phorum-register-html-injection(12502)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/7577","name":"7577","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/7584","name":"7584","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12487","name":"phorum-multiple-xss(12487)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/321310","name":"20030513 Phorum Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-08T02:28:03.488Z"}}]}}}