188 matches found
CVE-2022-30861
FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...
CVE-2022-30860
FUDforum 3.1.2 is vulnerable to remote code execution via the Upload File feature of the File Administration System in the Admin Control Panel. Connected advisories and vendor pages consistently describe an arbitrary file upload vulnerability that could allow code execution on affected systems. S...
CVE-2022-30860
FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel...
CVE-2022-30860
FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel...
PT-2022-20360
Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.2 Description The issue is related to Cross Site Scripting XSS via the page title param in the Page Manager within the Admin Control Panel. Recommendations For FUDForum version 3.1.2, consider restricting access to the Pag...
FUDForum 跨站脚本漏洞
FUDForum is a PHP-based forum software. version 3.1.2 of FUDForum contains a cross-site scripting vulnerability. An attacker can exploit this vulnerability to perform cross-site scripting attacks with the help of the pageu title parameter of the page manager in the administration control panel...
CVE-2022-30861: Improper Neutralization of Input During Web Page Generation
FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...
CVE-2022-30863: Improper Neutralization of Input During Web Page Generation
FUDForum 3.1.2 is vulnerable to Cross Site Scripting XSS via pagetitle param in Page Manager in the Admin Control Panel...
PT-2022-20359
Name of the Vulnerable Software and Affected Versions FUDforum version 3.1.2 Description The issue is related to Stored XSS via the Forum Name field in the Forum Manager Feature. This allows for malicious code to be stored and executed when the forum name is displayed. Recommendations For FUDforu...
FUDforum 跨站脚本漏洞
FUDForum is a PHP-based forum software. version 3.1.2 of FUDForum contains a cross-site scripting vulnerability. An attacker can exploit this vulnerability to perform cross-site scripting attacks with the help of the forum name field in the forum manager function...
PT-2022-20358
Name of the Vulnerable Software and Affected Versions FUDforum version 3.1.2 Description The issue allows for Remote Code Execution through the Upload File feature of the File Administration System in the Admin Control Panel. Recommendations For FUDforum version 3.1.2, consider disabling the Uplo...
FUDForum 代码问题漏洞
FUDForum is a PHP-based open source forum software.FUDForum versions prior to 3.1.2 are vulnerable to remote code execution. An attacker can use this vulnerability to execute remote code with the help of the upload file function of the file management system in the administration control panel...
CVE-2022-30860: Unrestricted Upload of File with Dangerous Type
FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel...
CVE-2022-28545
FUDforum 3.1.1 is vulnerable to Stored XSS...
CVE-2022-28545
FUDforum 3.1.1 is vulnerable to Stored XSS...
Cross site scripting
FUDforum 3.1.1 is vulnerable to Stored XSS...
CVE-2022-28545
FUDforum 3.1.1 is vulnerable to Stored XSS...
CVE-2022-28545
CVE-2022-28545 affects FUDforum 3.1.1 and is described as a Stored XSS vulnerability. Public references in the connected documents confirm the product and vulnerability class, with CVSS metrics indicating a low to medium overall severity (CVSS 3.1 base score 5.4; CVSS 2.0 base score 3.5). The roo...