Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Phorum 5.0.14a can be tricked into redirect attacks

CVE-2005-0843 · published 21 years ago
Summary

The Phorum forum software version 5.0.14a does not properly handle user input in its search function, allowing an attacker to insert special characters that change the web page’s redirect address. This can let a remote attacker send users to malicious sites or manipulate what they see after a search. Apply the vendor’s update or patch and ensure input is validated to stop this behavior.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
phorum phorum 5.0.14a
cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*
Original advisory text
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location h...
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
4% chance of attack within 30 days
Timeline
Published2 May 2005
Updated24 Oct 2026
First seen29 Sep 2026
Sources
CVE-2005-0843 · NVD
Track software like this
Free during beta