CVE-2021-27519

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

CVE-2021-27519

CVE-2021-27519 – FUDForum 3.1.0 Cross-Site Scripting Affected software: FUDForum 3.1.0. Issue: an XSS vulnerability exists in index.php where user input in the “srch” parameter is not properly sanitized, allowing remote attackers to inject JavaScript. Impact: as described, successful exploitation...

CVE-2021-27520

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

CVE-2021-27520

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

CVE-2021-27520

CVE-2021-27520 is a documented XSS vulnerability in FUDForum 3.1.0. The issue allows an attacker to inject JavaScript via index.php when supplying the author parameter, potentially enabling script execution in the context of other users and, as described in connected data, may lead to cookie-base...

CVE-2021-27519: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

PT-2021-17492

Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the author parameter. Recommendations For FUDForum version 3.1.0, as a temporary workaround,...

PT-2021-17491

Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the srch parameter. Recommendations For FUDForum version 3.1.0, consider disabling the srch...

FUDForum 跨站脚本漏洞

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the srch parameter in index.php...

FUDForum 跨站脚本漏洞

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the author parameter in index.php...

CVE-2021-27520: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

CVE-2013-2267

PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system...

Code injection

PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system...

CVE-2013-2267

PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system...

CVE-2013-2267

PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system...

CVE-2013-2267

FUDforum 3.0.4 and earlier are affected by a PHP code injection in /adm/admreplace.php due to insufficient validation of POST parameters regex_str, regex_str_opt and regex_with, allowing remote attackers to inject and execute arbitrary PHP code on the server with web server privileges (CWE-94). T...

CVE-2013-2267: Improper Control of Generation of Code

PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system...

PT-2020-7387

Name of the Vulnerable Software and Affected Versions: FUDforum Bulletin Board Software version 3.0.4 Description: A PHP Code Injection issue allows remote attackers to execute arbitrary code on the system. Recommendations: For FUDforum Bulletin Board Software version 3.0.4, at the moment, there ...

FUDForum Remote Code Execution (CVE-2019-18873)

A remote code execution vulnerability exists in FUDForum. Successful exploitation could result in execution of arbitrary code on the affected system...

FUDForum Cross-Site Scripting Vulnerability

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. FUDForum 3.0.9 suffers from a stored cross-site scripting vulnerability that can be exploited by an attacker to achieve remote code execution via the nlogin parameter...