Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-3785

Malware in sbrugna...

6.5CVSS6.4AI score0.00251EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2004-2746

Malware in sbrugna...

4.3CVSS6.4AI score0.00413EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-4302

Malware in sbrugna...

4.3CVSS6.4AI score0.01509EPSS
Exploits1References8
CNVD
CNVD
added 2025/07/07 12:0 a.m.1 views

Simple forum forum1.php file SQL Injection Vulnerability

Simple forum is a simple forum. Simple forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter File in the file /forum1.php. An attacker can exploit this vulnerability to execute illegal SQL commands to ste...

8.8CVSS7.1AI score0.00197EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 10:8 p.m.3 views

CVE-2004-2756

Cross-site scripting XSS vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the 1 forum and 2 topicid parameters...

4.3CVSS6AI score0.00413EPSS
Exploits0References1
OSV
OSV
added 2023/05/09 4:15 p.m.11 views

CVE-2023-31800

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter...

5.4CVSS7.2AI score
Exploits0References2
CNVD
CNVD
added 2015/04/27 12:0 a.m.1 views

Dokeos 'forum' and 'origin' cross-site scripting vulnerabilities

Dokeos is an open source online education and course management system . The system supports file uploading , courseware production , notification and other teaching support functions. Dokeos 1.8.4 and previous versions of cross-site scripting vulnerabilities , the vulnerability stems from...

4.3CVSS6.4AI score0.00698EPSS
Exploits1References1
Prion
Prion
added 2009/10/27 4:30 p.m.10 views

Sql injection

Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the 1 forum parameter to modules/forum/post.php and possibly 2 forumid variable to modules/forum/class/class.permissions.php...

6.5CVSS8.9AI score0.00251EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2009/10/27 4:0 p.m.16 views

CVE-2009-3813

Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the 1 forum parameter to modules/forum/post.php and possibly 2 forumid variable to modules/forum/class/class.permissions.php...

8.2AI score0.00251EPSS
Exploits1References2
NVD
NVD
added 2008/10/27 8:0 p.m.6 views

CVE-2008-4754

SQL injection vulnerability in forum.php in Scripts for Sites SFS Ez Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...

5.8CVSS8.4AI score0.01045EPSS
Exploits1References6
CVE
CVE
added 2008/10/27 7:0 p.m.41 views

CVE-2008-4754

The CVE-2008-4754 issue affects Scripts for Sites (SFS) Ez Forum, where the SQL injection flaw is in forum.php via the forum parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, leading to potential data exposure or modification. The NVD entry lists a CVSS v2 ba...

5.8CVSS8.4AI score0.01045EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2008/07/02 5:14 p.m.9 views

CVE-2008-2965

Cross-site scripting XSS vulnerability in viewforum.php in JaxUltraBB JUBB 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

4.3CVSS5.7AI score0.0313EPSS
Exploits1References3
Cvelist
Cvelist
added 2008/07/02 5:0 p.m.14 views

CVE-2008-2965

Cross-site scripting XSS vulnerability in viewforum.php in JaxUltraBB JUBB 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

5.7AI score0.0313EPSS
Exploits1References3
Prion
Prion
added 2008/04/15 5:5 p.m.6 views

Sql injection

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...

6.8CVSS9.1AI score0.00462EPSS
Exploits1References3
CVE
CVE
added 2006/06/19 9:0 p.m.36 views

CVE-2006-3096

CVE-2006-3096: Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL via user-controlled input in (1) the forum parameter in messagepost.cfm and (2) the topic parameter in topics.cfm. Root cause described as improper handling of inp...

7.5CVSS8.6AI score0.00431EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2005/12/17 12:3 a.m.8 views

CVE-2005-4307

Cross-site scripting XSS vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to 1 forum.cgi and 2 post.cgi, or 3 the user parameter to profile.cgi...

4.3CVSS5.7AI score0.01509EPSS
Exploits1References7
NVD
NVD
added 2005/11/16 7:42 a.m.7 views

CVE-2005-3585

SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...

7.5CVSS8.1AI score0.0108EPSS
Exploits0References7
CVE
CVE
added 2005/11/16 7:37 a.m.51 views

CVE-2005-3584

CVE-2005-3584 is a cross-site scripting (XSS) vulnerability in PhpWebThings 1.4.4, exploitable through forum.php via the forum parameter. The underlying issue is insufficient input sanitization for that parameter, enabling remote attackers to inject arbitrary web script or HTML. The connected doc...

4.3CVSS6AI score0.00353EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2005/11/16 7:37 a.m.15 views

CVE-2005-3585

SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...

8.1AI score0.0108EPSS
Exploits0References7
Rows per page
Query Builder