Vanillaforums vulnerabilities

Products

• Vanilla 19
• Vanilla Forums 7

Newest

• kaspersky lab vanilla forums It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher. CVE-2010-4266 6.1 MediumJune 22, 2021
• kaspersky lab vanilla forums It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a... CVE-2010-4264 6.1 MediumJune 22, 2021
• vanillaforums vanilla index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS. CVE-2020-8825 Public exploit 5.4 MediumFebruary 10, 2020
• kaspersky lab vanilla forums, vanilla forums, vanillaforums vanilla +2 more Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter. CVE-2011-1009 6.1 MediumFebruary 5, 2020
• kaspersky lab vanilla forums, vanilla forums, vanillaforums vanilla +2 more An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla... CVE-2011-3614 9.8 CriticalJanuary 22, 2020
• kaspersky lab vanilla forums, vanilla forums, vanillaforums vanilla +2 more An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled. CVE-2011-3613 7.5 HighJanuary 22, 2020
• vanillaforums vanilla In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager... CVE-2019-9889 2.7 LowMarch 20, 2019
• kaspersky lab vanilla forums Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary... CVE-2019-8279 5.4 MediumMarch 2, 2019
• vanillaforums vanilla Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated... CVE-2018-19499 7.2 HighNovember 23, 2018
• vanillaforums vanilla Vanilla 2.6.x before 2.6.4 allows remote code execution. CVE-2018-18903 9.8 CriticalNovember 3, 2018
• vanillaforums vanilla Vanilla before 2.6.1 allows XSS via the email field of a profile. CVE-2018-17571 6.1 MediumSeptember 28, 2018
• vanillaforums vanilla Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation,... CVE-2018-16410 6.5 MediumSeptember 3, 2018
• vanillaforums vanilla forums In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR)... CVE-2018-15833 4.3 MediumAugust 26, 2018
• vanillaforums vanilla forums Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from... CVE-2017-1000432 Public exploit 8.0 HighJanuary 2, 2018
• vanillaforums vanilla The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote... CVE-2016-10073 Public exploit EPSS 83.6% 7.5 HighMay 23, 2017
• vanillaforums vanilla, vanilla forums +1 more Multiple cross-site scripting (XSS) vulnerabilities in Vanilla Forums before 2.0.18.13 and 2.1.x... CVE-2014-9685 4.3 MediumFebruary 25, 2015
• vanillaforums latestcomment Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums... CVE-2012-6555 Public exploit 4.3 MediumMay 23, 2013
• vanillaforums vanilla Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified... CVE-2013-3528 Public exploit 7.5 HighMay 10, 2013
• vanillaforums vanilla Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers... CVE-2013-3527 Public exploit 7.5 HighMay 10, 2013
• vanillaforums vanilla, vanilla forums +1 more The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify... CVE-2012-4954 3.5 LowNovember 15, 2012
• vanillaforums vanilla Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3812 5.0 MediumSeptember 24, 2011
• vanillaforums vanilla The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers... CVE-2011-0910 6.4 MediumFebruary 8, 2011
• vanillaforums vanilla Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote... CVE-2011-0909 4.3 MediumFebruary 8, 2011
• vanillaforums vanilla Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect... CVE-2011-0908 5.8 MediumFebruary 8, 2011
• vanillaforums vanilla Cross-site scripting (XSS) vulnerability in index.php in Vanilla Forums before 2.0.17 allows... CVE-2011-0526 4.3 MediumFebruary 8, 2011