33 matches found
CVE-2026-77143
CVE-2026-77143 is a broken access control vulnerability in the TYPO3 extension "Forum" (pforum) . The frontend topic editing flow fails to verify on the server side that the requesting visitor actually owns the topic being modified. Because topic identifiers are visible in the public forum listin...
CVE-2026-77143 Broken Access Control in extension "Forum" (pforum)
The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content,...
CVE-2026-77143 Broken Access Control in extension "Forum" (pforum)
The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content,...
TYPO3-EXT-SA-2026-021: Broken Access Control in extension "Forum" (pforum)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-021...
EUVD-2002-0316
Malware in sbrugna...
EUVD-2002-0284
Malware in sbrugna...
EUVD-2004-1710
Malware in sbrugna...
Malicious code in pforum (npm)
The package pforum was found to contain malicious code...
MAL-2025-29108 Malicious code in pforum (npm)
The package pforum was found to contain malicious code...
PScript PForum 1.24/1.25 User Profile HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10954/info PScript PForum is reported prone to a HTML injection vulnerability. The vulnerability presents itself due to a lack of sufficient sanitization performed on data submitted through input fields of the PForum user...
Powie PForum 1.1x Username Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4165/info Powie PForum is web forum software, written in PHP and back-ended by MySQL. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. PForum is prone to cross-site scripting...
CVE-2008-4355
The CVE-2008-4355 issue affects Powie PSCRIPT Forum (aka PHP Forum or pForum) versions ≤ 1.30, where showprofil.php is vulnerable to SQL injection via the id parameter. The underlying flaw allows remote attackers to manipulate SQL queries and potentially impact data integrity and confidentiality....
pForum 1.30 (showprofil.php id) Remote SQL Injection Vulnerability
No description provided by source. ===================================================================================================== Powie's PHP Forum = v1.30 showprofil Remote SQL Injection Exploit...
pForum 1.30 - 'showprofil.php' SQL Injection
===================================================================================================== Powie's PHP Forum = v1.30 showprofil Remote SQL Injection Exploit ===================================================================================================== Critical Level : Dangerous...
pForum 1.30 (showprofil.php id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== pForum 1.30 showprofil.php id Remote SQL Injection Vulnerability ==================================================================...
CVE-2006-6038
SQL injection vulnerability in editpoll.php in Powie's PHP Forum pForum 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6038
SQL injection vulnerability in editpoll.php in Powie's PHP Forum pForum 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6038
CVE-2006-6038 affects Powie’s PHP Forum (pForum) prior to and including version 1.29a, where SQL injection is triggered in editpoll.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL statements; impact is partial confidentiality/integrity/availability per...
CVE-2004-1716
CVE-2004-1716 is a cross-site scripting (XSS) vulnerability affecting PForum before 1.26 . The issue allows remote attackers to inject arbitrary web script or HTML through the IRC Server or AIM ID fields in the user profile. The connected documents confirm the affected component and vectors but d...