İçeriğe atla
Noroxi

Phorum kayıtları

phorum üreticisine ait 57 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
13
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

57 kayıt
  • CVE-2003-1487
    42Planlayın

    Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the

    KritikCVSS 10,0İstismar yokEPSS %8

    phorum · phorum31 Ara 2003

  • CVE-2002-0764
    41Planlayın

    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php tha

    YüksekCVSS 7,5Kavram kanıtıEPSS %38

    phorum · phorum12 Ağu 2002

  • CVE-2007-2338
    33İzleyin

    Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote attackers to perform unau

    YüksekCVSS 7,5Kavram kanıtıEPSS %9

    phorum · phorum27 Nis 2007

  • CVE-2006-3053
    31İzleyin

    PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    phorum · phorum16 Haz 2006

  • CVE-2006-6550
    31İzleyin

    PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    phorum · phorum14 Ara 2006

  • CVE-2000-1233
    31İzleyin

    SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the

    YüksekCVSS 7,5İstismar yokEPSS %2

    phorum · phorum31 Ara 2000

  • CVE-2007-2339
    31İzleyin

    Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands via (1) a modified r

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    phorum · phorum27 Nis 2007

  • CVE-2004-2240
    30İzleyin

    Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string

    YüksekCVSS 7,5İstismar yokEPSS %2

    phorum · phorum31 Ara 2004

  • CVE-2004-2243
    30İzleyin

    Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter,

    YüksekCVSS 7,5İstismar yokEPSS %2

    phorum · phorum31 Ara 2004

  • CVE-2003-1466
    30İzleyin

    Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) reg

    YüksekCVSS 7,5İstismar yokEPSS %1

    phorum · phorum31 Ara 2003

  • CVE-2004-0035
    30İzleyin

    SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the h

    YüksekCVSS 7,5İstismar yokEPSS %1

    phorum · phorum20 Oca 2004

  • CVE-2004-1938
    30İzleyin

    SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encode

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    phorum · phorum19 Nis 2004

  • CVE-2006-3249
    30İzleyin

    SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the pag

    YüksekCVSS 7,5İstismar yokEPSS %1

    phorum · phorum27 Haz 2006

  • CVE-2004-2110
    30İzleyin

    SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_em

    YüksekCVSS 7,5İstismar yokEPSS %1

    phorum · phorum31 Ara 2004

  • CVE-2007-2249
    28İzleyin

    include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_id

    OrtaCVSS 6,5Kavram kanıtıEPSS %7

    phorum · phorum25 Nis 2007

  • CVE-2003-0283
    28İzleyin

    Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a m

    OrtaCVSS 6,8Kavram kanıtıEPSS %4

    phorum · phorum16 Haz 2003

  • CVE-2005-3543
    27İzleyin

    SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows remote attackers to

    OrtaCVSS 6,8İstismar yokEPSS %1

    phorum · phorum16 Kas 2005

  • CVE-2007-0769
    27İzleyin

    Cross-site scripting (XSS) vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 6,8İstismar yokEPSS %1

    phorum · phorum5 Şub 2007

  • CVE-2007-0767
    27İzleyin

    Cross-site scripting (XSS) vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 6,8İstismar yokEPSS %1

    phorum · phorum5 Şub 2007

  • CVE-2008-1486
    27İzleyin

    SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands

    OrtaCVSS 6,8İstismar yokEPSS %1

    phorum · phorum24 Mar 2008

  • CVE-2011-3381
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified

    OrtaCVSS 6,8İstismar yokEPSS %1

    phorum · phorum8 Eyl 2011

  • CVE-2011-3622
    24İzleyin

    A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18.

    OrtaCVSS 6,1İstismar yokEPSS %1

    phorum · phorum22 Oca 2020

  • CVE-2006-3611
    23İzleyin

    Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via d

    OrtaCVSS 5,5Kavram kanıtıEPSS %2

    phorum · phorum18 Tem 2006

  • CVE-2006-6968
    23İzleyin

    Cross-site scripting (XSS) vulnerability in the group moderation control center page in Phorum before 5.1.19 might allow remote attackers to

    OrtaCVSS 5,8İstismar yokEPSS %1

    phorum · phorum5 Şub 2007

  • CVE-2005-0843
    21İzleyin

    CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body

    OrtaCVSS 5,0Kavram kanıtıEPSS %4

    phorum · phorum2 May 2005