GCVE - cpe:2.3:a:phorum:phorum:5.2.11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phorum:phorum:5.2.11:*:*:*:*:*:*:*

part: a version: 5.2.11 update: *

Vendor	Phorum (`464eb2ff-0d8a-510c-94ad-fbf915cd1de9`)
Product	Phorum (`6d3fa73e-50e6-59e6-b860-ac180a8b07bd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/phorum/core`	purl2cpe	2026-06-01 10:15:59.902123
`pkg:phorum/phorum`	purl2cpe	2026-06-01 10:15:59.902124

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-6659`	vulnerable	2026-06-08 05:03:01.519469	Details available Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Published: 2014-09-19T14:00:00.000Z Updated: 2024-09-17T04:19:39.204Z Open on db.gcve.eu Reference links http://secunia.com/advisories/50445 http://www.phorum.org/phorum5/read.php?64%2C151943	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4234`	vulnerable	2026-06-08 05:02:16.537077	Details available Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter. Published: 2014-09-04T14:00:00.000Z Updated: 2024-08-06T20:28:07.741Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html https://www.htbridge.com/advisory/HTB23109 http://secunia.com/advisories/50445 http://www.securityfocus.com/bid/55275 https://exchange.xforce.ibmcloud.com/vulnerabilities/78124	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3392`	vulnerable	2026-06-08 04:59:25.401083	Details available Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter. Published: 2011-09-08T18:00:00.000Z Updated: 2024-08-06T23:29:56.896Z Open on db.gcve.eu Reference links http://holisticinfosec.org/content/view/184/45/ https://exchange.xforce.ibmcloud.com/vulnerabilities/69456 http://www.securityfocus.com/bid/49347 http://secunia.com/advisories/45787 http://www.phorum.org/phorum5/read.php?64%2C149490%2C149490#msg-149490	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3382`	vulnerable	2026-06-08 04:59:25.251638	Details available Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-09-08T18:00:00.000Z Updated: 2024-09-16T22:20:49.793Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN71435255/index.html http://www.phorum.org/phorum5/read.php?64%2C147504 http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3381`	vulnerable	2026-06-08 04:59:25.246140	Details available Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Published: 2011-09-08T18:00:00.000Z Updated: 2024-09-16T22:25:05.584Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN71435255/index.html http://www.phorum.org/phorum5/read.php?64%2C147504 http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1629`	vulnerable	2026-06-08 04:54:09.478779	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Phorum 5.2.11

Notes

PURL mappings

Vulnerability references

Contribute