Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Fudforum MEDIUM 6.1
CVE-2024-30951

FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php.

No fix yet
Fix from $1,600 2024-04-17
Fudforum HIGH 7.2
CVE-2022-30860EPSS 24%

FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.

Fix: 3.1.2+
Fix from $1,950 2022-06-06
Fudforum MEDIUM 5.4
CVE-2022-28545

FUDforum 3.1.1 is vulnerable to Stored XSS.

Patch available
Fix from $1,600 2022-05-06
Fudforum MEDIUM 6.1
CVE-2021-27519EPSS 8%

A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter.

Patch available
Fix from $1,600 2021-03-19
Fudforum MEDIUM 6.1
CVE-2021-27520EPSS 6%

A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter.

Patch available
Fix from $1,600 2021-03-19
Fudforum HIGH 7.2
CVE-2013-2267EPSS 9%

PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system.

Mitigation only
Fix from $1,950 2020-01-27
Fudforum CRITICAL 9.0
CVE-2019-18839EPSS 5%

FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to …

No fix yet
Fix from $2,300 2019-11-13
Fudforum CRITICAL 9.0
CVE-2019-18873EPSS 8%

FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user accou…

No fix yet
Fix from $2,300 2019-11-12