Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
HIGH 8.8
CVE-2022-26173
JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.page, which allows attack…
Jforum
Mitigation only
MEDIUM 5.4
CVE-2021-40509
ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature.
Jforum
Patch available
MEDIUM 5.3
CVE-2019-7550
In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/use…
Jforum
No fix yet
MEDIUM 6.8
CVE-2013-7209
Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authenticat…
Jforum
No fix yet
MEDIUM 5.8
CVE-2012-5338
Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL i…
Jforum
No fix yet