Phorum Search Script Cross-Site Scripting Vulnerability

Bugtraq ID:	10822
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 28 2004 12:00AM
Updated:	Jul 28 2004 12:00AM
Credit:	Discovery is credited to vampz <[email protected]>.
Vulnerable:	Phorum Phorum 5.0.7 BETA
Not Vulnerable:

Phorum Search Script Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability is reported to affect Phorum. This issue affects the 'search.php' script. As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user.

This vulnerability was reported to affect Phorum 5.0.7 beta.

Phorum Search Script Cross-Site Scripting Vulnerability

No exploit is required.

The following proof of concept is available:
http://www.example.com/phorum5/search.php?12,search=vamp,page=1,match_type=ALL,
match_dates=00,match_forum=ALL ,body=,author=,subject= [ Evil Code Here ]

Phorum Search Script Cross-Site Scripting Vulnerability

Solution:
The vendor has reported that this issue has been fixed in the CVS.

Phorum Search Script Cross-Site Scripting Vulnerability

References:

• Phorum Homepage (Phorum)
  
• Phorum Input Validation Error in 'search.php' Permits Cross-Site Scripting (SecurityTracker)