Approved changes feed: RSS · Atom

cpe:2.3:a:phorum:phorum:5.1.13:*:*:*:*:*:*:*

part: a version: 5.1.13 update: *

VendorPhorum (464eb2ff-0d8a-510c-94ad-fbf915cd1de9)
ProductPhorum (6d3fa73e-50e6-59e6-b860-ac180a8b07bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/phorum/core purl2cpe 2026-06-01 10:15:59.902092
pkg:phorum/phorum purl2cpe 2026-06-01 10:15:59.902094

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3392 vulnerable 2026-06-08 04:59:25.400700 Details available
Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter.
Published: 2011-09-08T18:00:00.000Z
Updated: 2024-08-06T23:29:56.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3382 vulnerable 2026-06-08 04:59:25.251247 Details available
Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-09-08T18:00:00.000Z
Updated: 2024-09-16T22:20:49.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3381 vulnerable 2026-06-08 04:59:25.233501 Details available
Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published: 2011-09-08T18:00:00.000Z
Updated: 2024-09-16T22:25:05.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1629 vulnerable 2026-06-08 04:54:09.469258 Details available
Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address.
Published: 2010-05-19T22:00:00.000Z
Updated: 2024-08-07T01:28:42.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0488 vulnerable 2026-06-08 04:51:09.717432 Details available
Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2009-02-09T20:00:00.000Z
Updated: 2024-08-07T04:40:03.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1486 vulnerable 2026-06-08 04:50:20.759023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3611 vulnerable 2026-06-08 04:49:09.772135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.