İçeriğe atla
Noroxi

fudforum kayıtları

fudforum üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

12 kayıt
  • CVE-2019-18873
    38İzleyin

    FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header.

    KritikCVSS 9,0Kavram kanıtıEPSS %8

    fudforum · fudforum11 Kas 2019

  • CVE-2019-18839
    38İzleyin

    FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter.

    KritikCVSS 9,0İstismar yokEPSS %5

    fudforum · fudforum13 Kas 2019

  • CVE-2022-30860
    35İzleyin

    FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.

    YüksekCVSS 7,2İstismar yokEPSS %24

    fudforum · fudforum6 Haz 2022

  • CVE-2013-2267
    31İzleyin

    PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the sys

    YüksekCVSS 7,2Kavram kanıtıEPSS %8

    fudforum · fudforum27 Oca 2020

  • CVE-2021-27519
    26İzleyin

    A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %7

    fudforum · fudforum19 Mar 2021

  • CVE-2021-27520
    26İzleyin

    A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %6

    fudforum · fudforum19 Mar 2021

  • CVE-2024-30951
    24İzleyin

    FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php

    OrtaCVSS 6,1İstismar yokEPSS %0

    fudforum · fudforum17 Nis 2024

  • CVE-2022-28545
    21İzleyin

    FUDforum 3.1.1 is vulnerable to Stored XSS.

    OrtaCVSS 5,4İstismar yokEPSS %0

    fudforum · fudforum6 May 2022

  • CVE-2022-30861
    19İzleyin

    FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature.

    OrtaCVSS 4,8İstismar yokEPSS %0

    fudforum · fudforum6 Haz 2022

  • CVE-2022-30863
    19İzleyin

    FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Panel.

    OrtaCVSS 4,8İstismar yokEPSS %0

    fudforum · fudforum6 Haz 2022

  • CVE-2024-30950
    14İzleyin

    A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted

    DüşükCVSS 3,5İstismar yokEPSS %0

    fudforum · fudforum17 Nis 2024

  • CVE-2013-5309
    10İzleyin

    Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a n

    DüşükCVSS 2,6İstismar yokEPSS %1

    fudforum · fudforum16 Ağu 2013