Phorum Read.PHP Cross-Site Scripting Vulnerability

Bugtraq ID:	18683
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 27 2006 12:00AM
Updated:	Jun 27 2006 10:35PM
Credit:	JPCERT is credited with the discovery of this vulnerability.
Vulnerable:	Phorum Phorum 5.1.13
Not Vulnerable:	Phorum Phorum 5.1.14

Phorum Read.PHP Cross-Site Scripting Vulnerability

Phorum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Phorum version 5.1.13 is vulnerable; other versions may also be affected.

Phorum Read.PHP Cross-Site Scripting Vulnerability

Attackers can exploit this issue by enticing a victim user into following a malicious URI.

Phorum Read.PHP Cross-Site Scripting Vulnerability

Solution:
The vendor has released version 5.1.14 to address this issue; please see the reference section for details.


Phorum Phorum 5.1.13

• Phorum phorum-5.1.14.tar.gz
  http://www.phorum.org/downloads/phorum-5.1.14.tar.gz

Phorum Read.PHP Cross-Site Scripting Vulnerability

References:

• Phorum 5.1.14 Released (Phorum)
  
• Phorum Homepage (Phorum)