Lucene search
+L

4 matches found

Prion
Prion
added 2019/02/12 8:29 p.m.19 views

Cross site request forgery (csrf)

In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username that exists, then an "is already in use" error is produced. NOTE: this product is discontinued...

5CVSS5.3AI score0.01842EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/02/12 8:0 p.m.23 views

CVE-2019-7550

In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username that exists, then an "is already in use" error is produced. NOTE: this product is discontinued...

5.4AI score0.01842EPSS
Exploits1References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.35 views

JForum 2.1.8 bookmarks CSRF & XSS

No description provided by source. JForum 2.1.8 bookmarks CSRF & XSS Advisory Information Advisory ID: NGENUITY-2010-004 Date published: 2010-06-06 Vulnerability Information Class: Cross-Site Request Forgery CSRF Software Description Per jforum.net JForum is a powerful and robust discussion board...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2010/06/08 12:0 a.m.30 views

JForum 2.1.8 Cross Site Request Forgery / Cross Site Scripting

JForum 2.1.8 bookmarks CSRF & XSS Advisory Information Advisory ID: NGENUITY-2010-004 Date published: 2010-06-06 Vulnerability Information Class: Cross-Site Request Forgery CSRF Software Description Per jforum.net "JForum is a powerful and robust discussion board system implemented in Java^tm . I...

0.4AI score
Exploits0
Rows per page
Query Builder