CVE:CVE-2004-1822
CNNVD:CNNVD-200403-055
Phorum 3.1到5.0.3测试版存在多个跨站脚本漏洞。远程攻击者借助（1）login.php的HTTP_REFERER参数，（2）register.php的HTTP_REFERER参数，或（3）profile.php的target参数注入任意web脚本或HTML。
solution:Upgrade phorum phorum to a higher version than 3.1,3.1.1,3.1.1_pre,3.1.1_rc2,3.1.1a,3.1.2,3.2,3.2.2,3.2.3,3.2.3a,3.2.3b,3.2.4,3.2.5,3.2.6,3.2.7,3.2.8,3.3.1,3.3.1a,3.3.2,3.3.2a,3.3.2b3,3.4,3.4.1,3.4.2,3.4.3,3.4.4,3.4.5,3.4.6,5.0.3_beta,and avoid the version 3.1,3.1.1,3.1.1_pre,3.1.1_rc2,3.1.1a,3.1.2,3.2,3.2.2,3.2.3,3.2.3a,3.2.3b,3.2.4,3.2.5,3.2.6,3.2.7,3.2.8,3.3.1,3.3.1a,3.3.2,3.3.2a,3.3.2b3,3.4,3.4.1,3.4.2,3.4.3,3.4.4,3.4.5,3.4.6,5.0.3_beta