Phorum vulnerabilities

Products

• Phorum 56

Newest

• phorum A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18. CVE-2011-3622 6.1 MediumJanuary 22, 2020
• phorum Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows... CVE-2012-6659 4.3 MediumSeptember 19, 2014
• phorum Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center ... CVE-2012-4234 Public exploit 4.3 MediumSeptember 4, 2014
• phorum Cross-site scripting (XSS) vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to... CVE-2011-4561 Public exploit 4.3 MediumNovember 28, 2011
• phorum Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3768 5.0 MediumSeptember 24, 2011
• phorum Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2... CVE-2011-3392 4.3 MediumSeptember 8, 2011
• phorum Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to... CVE-2011-3382 4.3 MediumSeptember 8, 2011
• phorum Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers... CVE-2011-3381 6.8 MediumSeptember 8, 2011
• phorum Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to... CVE-2010-1629 4.3 MediumMay 19, 2010
• phorum Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to... CVE-2009-0488 4.3 MediumFebruary 9, 2009
• phorum Cross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote... CVE-2008-4513 4.3 MediumOctober 9, 2008
• phorum SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote... CVE-2008-1486 6.8 MediumMarch 24, 2008
• phorum Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute... CVE-2007-2339 Public exploit 7.5 HighApril 27, 2007
• phorum Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1... CVE-2007-2338 Public exploit 7.5 HighApril 27, 2007
• phorum admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[... CVE-2007-2250 Public exploit 5.0 MediumApril 25, 2007
• phorum include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to... CVE-2007-2249 Public exploit 6.5 MediumApril 25, 2007
• phorum Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow... CVE-2007-2248 Public exploit 4.3 MediumApril 25, 2007
• phorum ** DISPUTED ** Cross-site scripting (XSS) vulnerability in register.php in Phorum 5.1.18 allows... CVE-2007-0769 Disputed 6.8 MediumFebruary 6, 2007
• phorum Cross-site scripting (XSS) vulnerability in the core in Phorum before 5.1.18 allows remote... CVE-2007-0767 6.8 MediumFebruary 6, 2007
• phorum Cross-site scripting (XSS) vulnerability in the group moderation control center page in Phorum... CVE-2006-6968 5.8 MediumFebruary 6, 2007
• phorum ** DISPUTED ** PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and... CVE-2006-6550 Public exploitDisputed 7.5 HighDecember 14, 2006
• phorum Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is... CVE-2006-3615 5.1 MediumJuly 14, 2006
• phorum Cross-site scripting (XSS) vulnerability in Phorum 5.1.14 allows remote attackers to inject... CVE-2006-3612 2.6 LowJuly 14, 2006
• phorum Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to... CVE-2006-3611 Public exploit 5.5 MediumJuly 14, 2006
• phorum ** DISPUTED ** SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows... CVE-2006-3249 Disputed 7.5 HighJune 27, 2006
• phorum ** DISPUTED ** PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and... CVE-2006-3053 Public exploitDisputed 7.5 HighJune 16, 2006
• phorum SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when... CVE-2005-3543 6.8 MediumNovember 16, 2005
• phorum Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote... CVE-2005-2836 4.3 MediumSeptember 7, 2005
• phorum CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform... CVE-2005-0843 Public exploit 5.0 MediumMarch 24, 2005
• phorum Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote... CVE-2005-0784 4.3 MediumMarch 20, 2005
• phorum Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to... CVE-2005-0783 Public exploit 4.3 MediumMarch 20, 2005
• phorum Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the... CVE-2004-2243 7.5 HighDecember 31, 2004
• phorum Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier... CVE-2004-2242 Public exploit 4.3 MediumDecember 31, 2004
• phorum Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to... CVE-2004-2241 4.3 MediumDecember 31, 2004
• phorum Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to... CVE-2004-2240 7.5 HighDecember 31, 2004
• phorum SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to... CVE-2004-2110 7.5 HighDecember 31, 2004
• phorum SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute... CVE-2004-1938 Public exploit 7.5 HighApril 19, 2004
• phorum Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote... CVE-2004-1822 Public exploit 4.3 MediumMarch 15, 2004
• phorum SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers... CVE-2004-0035 7.5 HighJanuary 20, 2004
• phorum Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote... CVE-2004-0034 4.3 MediumJanuary 8, 2004
• phorum Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers... CVE-2003-1487 10.0 HighDecember 31, 2003
• phorum Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an... CVE-2003-1486 5.0 MediumDecember 31, 2003
• phorum Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post... CVE-2003-1467 4.3 MediumDecember 31, 2003
• phorum Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a... CVE-2003-1466 7.5 HighDecember 31, 2003
• phorum Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote... CVE-2003-1465 5.0 MediumDecember 31, 2003
• phorum Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject... CVE-2003-0283 Public exploit 6.8 MediumMay 14, 2003
• phorum Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to... CVE-2002-2340 4.3 MediumDecember 31, 2002
• phorum Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1)... CVE-2002-0764 Public exploit EPSS 38.3% 7.5 HighJuly 26, 2002
• phorum Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users... CVE-2002-0352 5.0 MediumMay 3, 2002
• phorum violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and... CVE-2000-1234 Public exploit 5.0 MediumDecember 31, 2000
• Show olderLoading…