Phorum 3.4 – Email Subject Line Script Injection

漏洞ID	1053802	漏洞类型
发布时间	2003-04-02	更新时间	2003-04-02
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22451

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7262/info

It has been reported that it is possible to inject script code into the subject of a message in Phorum. This may be done by constructing a malicious subject line (or other fields) before sending an email to the target victim. 

"><script>alert("Vulnerable");</script>

相关推荐: OpenBSD getrlimit(2) Denial of Service Vulnerability

OpenBSD getrlimit(2) Denial of Service Vulnerability 漏洞ID 1101369 漏洞类型 Input Validation Error 发布时间 2002-11-07 更新时间 2002-11-07 CVE编…