Browse CVEs

MEDIUM 6.1 CVE-2024-30951 FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php. Fudforum No fix yet Fix from $1,6002024-04-17 HIGH 7.2 CVE-2022-30860EPSS 24% FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel. Fudforum 3.1.2+ Fix from $1,9502022-06-06 MEDIUM 5.4 CVE-2022-28545 FUDforum 3.1.1 is vulnerable to Stored XSS. Fudforum Patch available Fix from $1,6002022-05-06 MEDIUM 6.1 CVE-2021-27519EPSS 8% A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter. Fudforum Patch available Fix from $1,6002021-03-19 MEDIUM 6.1 CVE-2021-27520EPSS 6% A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter. Fudforum Patch available Fix from $1,6002021-03-19 HIGH 7.2 CVE-2013-2267EPSS 9% PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system. Fudforum Mitigation only Fix from $1,9502020-01-27 CRITICAL 9.0 CVE-2019-18839EPSS 5% FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to … Fudforum No fix yet Fix from $2,3002019-11-13 CRITICAL 9.0 CVE-2019-18873EPSS 8% FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user accou… Fudforum No fix yet Fix from $2,3002019-11-12