GCVE - cpe:2.3:a:phorum:phorum:5.2.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phorum:phorum:5.2.5:*:*:*:*:*:*:*

part: a version: 5.2.5 update: *

Vendor	Phorum (`464eb2ff-0d8a-510c-94ad-fbf915cd1de9`)
Product	Phorum (`6d3fa73e-50e6-59e6-b860-ac180a8b07bd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/phorum/core`	purl2cpe	2026-06-01 10:15:59.908877
`pkg:phorum/phorum`	purl2cpe	2026-06-01 10:15:59.908878

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-6659`	vulnerable	2026-06-08 05:03:01.515858	Details available Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Published: 2014-09-19T14:00:00.000Z Updated: 2024-09-17T04:19:39.204Z Open on db.gcve.eu Reference links http://secunia.com/advisories/50445 http://www.phorum.org/phorum5/read.php?64%2C151943	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3392`	vulnerable	2026-06-08 04:59:25.400995	Details available Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter. Published: 2011-09-08T18:00:00.000Z Updated: 2024-08-06T23:29:56.896Z Open on db.gcve.eu Reference links http://holisticinfosec.org/content/view/184/45/ https://exchange.xforce.ibmcloud.com/vulnerabilities/69456 http://www.securityfocus.com/bid/49347 http://secunia.com/advisories/45787 http://www.phorum.org/phorum5/read.php?64%2C149490%2C149490#msg-149490	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3382`	vulnerable	2026-06-08 04:59:25.251550	Details available Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-09-08T18:00:00.000Z Updated: 2024-09-16T22:20:49.793Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN71435255/index.html http://www.phorum.org/phorum5/read.php?64%2C147504 http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3381`	vulnerable	2026-06-08 04:59:25.242073	Details available Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Published: 2011-09-08T18:00:00.000Z Updated: 2024-09-16T22:25:05.584Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN71435255/index.html http://www.phorum.org/phorum5/read.php?64%2C147504 http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1629`	vulnerable	2026-06-08 04:54:09.475785	Details available Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address. Published: 2010-05-19T22:00:00.000Z Updated: 2024-08-07T01:28:42.109Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/05/18/11 http://www.openwall.com/lists/oss-security/2010/05/16/2 http://www.facebook.com/note.php?note_id=371190874581 http://osvdb.org/64759	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0488`	vulnerable	2026-06-08 04:51:09.723297	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Phorum 5.2.5

Notes

PURL mappings

Vulnerability references

Contribute