CVE-2012-4234

CVE Database · CVE-2012-4234

CVE-2012-4234

· N/AModified

CVSS v3.1

N/A

EPSS

2.29%

Published

Sep 4, 2014

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBPhorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter.

Weaknesses (CWE)

CWE-79

Affected Products (13)

phorum · phorumvulnerable

· phorum

References (14)

http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html

Exploit

http://packetstormsecurity.org/files/116057/Phorum-5.2.18-Cross-Site-Scripting.html

Exploit

http://secunia.com/advisories/50445

http://www.phorum.org/phorum5/read.php?64%2C151943

http://www.securityfocus.com/bid/55275

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/78124

https://www.htbridge.com/advisory/HTB23109

Exploit

http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html

Exploit

KEV Catalog EPSS Scores Vendors All CVEs