Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2005-2836

EPSS 0.43% · P63
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2005-2836

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," which is not properly handled by control.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Phorum多个跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Phorum是一个基于PHP+MySQL开发的开源论坛项目。它的特点是速度快，功能强大，面向模块化设计，安装简单。此外Phorum还集成电子报。 Phorum 5.0.17a 及以前版本中的多个跨站脚本(XSS)漏洞允许远程攻击者通过以下方式注入任意 web 脚本： (1)通过用户名参数向 register.php 文件注入; (2)通过"我的控制中心"中登录用户签字，这是由于 control.php 没有正确操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2005-2836

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-2836

Please Login to view more intelligence information

Same Patch Batch · n/a · 2005-09-07 · 21 CVEs total

CVE-2005-2815FlatNuke print.php信息泄漏或拒绝服务漏洞
CVE-2005-2840MAXdev MD-Pro多个未知漏洞
CVE-2005-2839MAXdev MD-Pro 多个跨站脚本漏洞
CVE-2005-2838MyBloggie login.php SQL 注入漏洞
CVE-2005-2837PlainBlack WebGUI 多个eval注入漏洞
CVE-2005-2820SqWebMail 跨站脚本漏洞
CVE-2005-2819DownFile权限提升漏洞
CVE-2005-2818DownFile 跨站脚本漏洞
CVE-2005-2817Simple Machines Forum信息泄露漏洞
CVE-2005-2816Greymatter跨站脚本漏洞
CVE-2005-2794Squid Proxy store.c远程拒绝服务漏洞
CVE-2005-2814FlatNuke vis_reg跨站脚本漏洞
CVE-2005-2813Flatnuke Index.PHP 目录遍历漏洞
CVE-2005-2812man2web远程命令执行漏洞
CVE-2005-2811Net-SNMP不可信搜索路径漏洞
CVE-2005-2810Urban多个栈缓冲区溢出漏洞
CVE-2005-2809SILC Server以不安全方式创建临时文件漏洞
CVE-2005-2808Frox绕过访问限制漏洞
CVE-2005-2807Frox 任意配置文件访问漏洞
CVE-2005-2796Squid sslConnectTimeout 函数拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-2836

No comments yet

Leave a comment