153 matches found
FUDForum 3.1.0 - Cross-Site Scripting
FUDForum 3.1.0 contains a cross-site scripting vulnerability which allows remote attackers to inject JavaScript via index.php in the "srch" parameter. id: CVE-2021-27519 info: name: FUDForum 3.1.0 - Cross-Site Scripting author: kh4sh3i severity: medium description: | FUDForum 3.1.0 contains a...
FUDforum-XSS-RCE
FUDforum-XSS-RCE FUDForum 3.0.9 - XSS / Ejecución Remota de Código CVE-2019-18873, CVE-2019-18839 Se han encontrado múltiples vulnerabilidades de XSS almacenado en FUDforum 3.0.9 que pueden resultar en ejecución remota de código. XSS almacenado a través del nombre de usuario en el foro: Informaci...
CVE-2021-27520
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...
CVE-2021-27519
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...
CVE-2019-18839
FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP file...
EUVD-2021-14272
Malware in sbrugna...
EUVD-2019-8540
Malware in sbrugna...
EUVD-2002-1404
Malware in sbrugna...
EUVD-2002-1405
Malware in sbrugna...
EUVD-2021-14271
Malware in sbrugna...
EUVD-2002-1406
Malware in sbrugna...
EUVD-2005-2601
Malware in sbrugna...
EUVD-2013-5149
Malware in sbrugna...
EUVD-2022-52655
Malicious code in bioql PyPI...
EUVD-2022-52656
Malicious code in bioql PyPI...
EUVD-2022-32987
Malicious code in bioql PyPI...
📄 FUDForum 3.2.0 Cross Site Scripting
FUDForum version 3.2.0 suffers from a persistent cross site scripting vulnerability. Exploit Title: FUDForum 3.2.0 Stored XSS Authenticated Exploit Author: tmrswrr Vendor Homepage: http://fudforum.org/ Software Link: https://sourceforge.net/projects/fudforum/files/FUDforum3.2.0.zip/download Versi...
CVE-2024-30951
FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the chpos parameter at /adm/admsmiley.php...
CVE-2024-30950
A stored cross-site scripting XSS vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /adm/admsql.php...