Browse CVEs

MEDIUM 6.1 CVE-2011-3622 A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18. Phorum 5.2.18+ Fix from $1,6002020-01-22 MEDIUM 5.0 CVE-2011-3768 Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an… Phorum Mitigation only Fix from $1,6002011-09-24 MEDIUM 6.8 CVE-2011-3381 Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims v… Phorum after 5.2.15 Fix from $1,6002011-09-08 MEDIUM 6.8 CVE-2008-1486 SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the … Phorum after 5.2.5 Fix from $1,6002008-03-24 HIGH 7.5 CVE-2007-2338EPSS 9% Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote attackers to perform unauthorized … Phorum after 5.1.20 Fix from $1,9502007-04-27 HIGH 7.5 CVE-2007-2339 Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands via (1) a modified recipients… Phorum after 5.1.20 Fix from $1,9502007-04-27 MEDIUM 6.5 CVE-2007-2249EPSS 7% include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST pa… Phorum after 5.1.20 Fix from $1,6002007-04-25 MEDIUM 5.0 CVE-2007-2250 admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter. Phorum after 5.1.20 Fix from $1,6002007-04-25 MEDIUM 6.8 CVE-2007-0767 Cross-site scripting (XSS) vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspe… Phorum after 5.1.17 Fix from $1,6002007-02-06 MEDIUM 6.8 CVE-2007-0769 Cross-site scripting (XSS) vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecif… Phorum Mitigation only Fix from $1,6002007-02-06 MEDIUM 5.8 CVE-2006-6968 Cross-site scripting (XSS) vulnerability in the group moderation control center page in Phorum before 5.1.19 might allow remote attackers to inject a… Phorum after 5.1.18 Fix from $1,6002007-02-06 HIGH 7.5 CVE-2006-6550 PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in… Phorum No fix yet Fix from $1,9502006-12-14 MEDIUM 5.5 CVE-2006-3611 Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory … Phorum after 5.1.14 Fix from $1,6002006-07-18 MEDIUM 5.1 CVE-2006-3615 Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote attackers to execute arbitrary PH… Phorum Mitigation only Fix from $1,6002006-07-18 HIGH 7.5 CVE-2006-3249 SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page paramet… Phorum after 5.1.14 Fix from $1,9502006-06-27 HIGH 7.5 CVE-2006-3053 PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in… Phorum after 5.1.13 Fix from $1,9502006-06-16 MEDIUM 6.8 CVE-2005-3543 SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows remote attackers to execute a… Phorum Patch available Fix from $1,6002005-11-16 MEDIUM 5.0 CVE-2005-0843 CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body paramete… Phorum Patch available Fix from $1,6002005-05-02 HIGH 7.5 CVE-2004-2110 SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email param… Phorum after 3.4.5 Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-2240 Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.… Phorum Patch available Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-2243 Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter, as demon… Phorum Mitigation only Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-1938 SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded charact… Phorum Patch available Fix from $1,9502004-04-19 HIGH 7.5 CVE-2004-0035 SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email… Phorum after 3.4.5 Fix from $1,9502004-01-20 HIGH 10.0 CVE-2003-1487EPSS 8% Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum c… Phorum Patch available Fix from $1,9502003-12-31 HIGH 7.5 CVE-2003-1466 Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php… Phorum Patch available Fix from $1,9502003-12-31 MEDIUM 5.0 CVE-2003-1465 Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files. Phorum Patch available Fix from $1,6002003-12-31 MEDIUM 5.0 CVE-2003-1486 Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quic… Phorum Patch available Fix from $1,6002003-12-31 MEDIUM 6.8 CVE-2003-0283 Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message wi… Phorum after 3.4.3 Fix from $1,6002003-06-16 HIGH 7.5 CVE-2002-0764EPSS 38% Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifie… Phorum Patch available Fix from $1,9502002-08-12 MEDIUM 5.0 CVE-2002-0352 Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program,… Phorum Mitigation only Fix from $1,6002002-06-25