CVE-2006-3053

PHORUM 5.1.13 and earlier suffer a PHP remote file inclusion via the PHORUM[http_path] parameter in common.php. The issue allows remote PHP code execution and is supported by multiple sources, which state the affected component is common.php and PHORUM 5.x series. The vendor disputes the existenc...

CVE-2006-3053: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUMhttppath parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of...

PT-2006-3958 · Phorum · Phorum

Name of the Vulnerable Software and Affected Versions: Phorum versions 5.1.13 and earlier Description: A remote file inclusion issue in common.php allows remote attackers to execute arbitrary PHP code via a URL in the PHORUMhttp path parameter. However, the vendor disputes this issue, stating tha...

Phorum < 5.0.18 XSS Vulnerability

Phorum contains a script called SPDX-FileCopyrightText: 2006 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phorum:phorum"; ifdescription...

Phorum register.php Cross-Site Scripting

The remote version of Phorum contains a script called 'register.php' which is vulnerable to a cross-site scripting attack. An attacker may exploit this problem to steal the authentication credentials of third party users. OpenVAS Vulnerability Test $Id: phorumregisterxss.nasl 8022 2017-12-07...

CVE-2006-1151

Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...

CVE-2006-1152

PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1152

CVE-2006-1152 affects M-Phorum 0.2. The issue is a PHP remote file inclusion in index.php where an attacker can include arbitrary files through the go parameter. According to the NVD entry, the vulnerability has a CVSSv2 base score of 5.0 (Medium) with network attack vector, low complexity, no au...

CVE-2006-1152

PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1151

CVE-2006-1151 is a cross-site scripting vulnerability in M-Phorum 0.2, exploitable via the go parameter in index.php. The NVD entry notes an injected script/HTML and a CVSS2 base score of 5.0 (MEDIUM) with network access, no authentication, and partial integrity impact (I:P). Affected component: ...

CVE-2006-1151

Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...

CVE-2006-1151: Undefined Security Weakness

Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...

CVE-2006-1152: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

M-Phorum Cross Site Scripting

------------------------------------------------------------------------------------- M-Phorum Cross Site Scripting Site:http://m-phorum.sourceforge.net/site/ Credit : CodeXpLoder'tq webpage:www.biyosecurity.com Mail :[email protected]...

PHORUM 3.x/5.x - 'Common.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/16977/info The PHORUM application is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containin...

PHORUM 3.x5.x - Common.php Remote File Inclusion

PHORUM 3.x5.x - Common.php Remote File Inclusion source: https://www.securityfocus.com/bid/16977/info The PHORUM application is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...

CVE-2005-3543

SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the forumids parameter...

CVE-2005-3543

CVE-2005-3543 : SQL injection in Phorum web forum software via search.php (versions 5.0.0alpha–5.0.20) when register_globals is enabled. The vulnerability allows remote attackers to modify/exfiltrate data by injecting SQL through the forum_ids parameter. Affected: Phorum 5.0.0alpha up to 5.0.20. ...