CVE-2003-1467: Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (...

Security readout for executives and security teams

CVE-2003-1467 describes multiple cross-site scripting flaws in old Phorum forum software before version 3.4.3. A remote attacker could cause a vulnerable forum to run injected script or HTML in a user’s browser, potentially affecting sessions, trust in forum content, or users who visit crafted pages. Exposure is most likely limited to legacy, internet-facing Phorum installations running versions before 3.4.3. The bundle does not provide CPEs or deployment fingerprints, so inventory and version confirmation are required before assuming impact. Prioritize if any legacy Phorum forum is still public or used by authenticated customers. Otherwise, this is mainly an inventory hygiene issue because the vulnerability is old, severity is unscored, and active exploitation is not evidenced in the bundle. Mitigation focus: Identify whether any Phorum instances remain in production or archived public sites.; Upgrade Phorum installations before 3.4.3 to 3.4.3 or later per vendor guidance.; Retire, isolate, or restrict access to unsupported legacy Phorum deployments..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.