Codoforum 5.1 - Arbitrary File Upload

Codoforum 5.1 contains an arbitrary file upload vulnerability via the logo change option in the admin panel. An attacker can upload arbitrary files to the server, which in turn can be used to make the application execute file content as code. As a result, an attacker can potentially obtain...

codoforum

CVE-2020-5842 Stored XSS Vulnerability in Codoforum 4.8.3 Listed in: Exploit-db, Cve Mitre and The daily swig While I was searching for a free forum software for our community I found Codoforum. After installing it We Vyshnav Vizz tried a few simple XSS payloads to ensure the security and suddenl...

PT-2026-91879

First CVE IDs are in — MITRE assigned 10 CVEs to our research CVE-2026-88557 → 88566. All 10 were found, verified end-to-end, and disclosed first by our AI-driven research pipeline. Every single one ships a full root-cause analysis and a working, reproducible PoC — public since day one, no...

Codoforum - Attachment Path Traversal Detection (CVE-2014-9261)

Detects CVE-2014-9261 by requesting index.php?u=serve/attachment&path= traversal to sites/default/config.php. !/usr/bin/env python3 -- coding: utf-8 -- """Codoforum serve/attachment arbitrary file download CVE-2014-9261.""" from kittysploit import from lib.protocols.http.httpclient import...

CodoForum-v5.1---Remote-Code-Execution-RCE-

CodoForum v5.1 - Authenticated RCE Fixed Exploit CVE: 20...

CVE-2022-31854

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

CVE-2020-7051

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover...

EUVD-2020-26997

Malware in sbrugna...

EUVD-2020-29838

Malware in sbrugna...

EUVD-2020-26492

Malware in sbrugna...

EUVD-2020-26491

Malware in sbrugna...

EUVD-2020-28184

Malware in sbrugna...

EUVD-2020-18507

Malware in sbrugna...

EUVD-2020-18511

Malware in sbrugna...

EUVD-2020-28185

Malware in sbrugna...

EUVD-2020-14611

Malware in sbrugna...

EUVD-2020-26996

Malware in sbrugna...

EUVD-2020-18508

Malware in sbrugna...

CVE-2020-5843

Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen...

CVE-2020-22540

Stored Cross-Site Scripting XSS vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive information via crafted payload to Category name component...