4 matches found
CVE-2023-22488 Missing authorization in Flarum
Flarum is a forum software for building communities. Using the notifications feature, one can read restricted/private content and bypass access checks that would be in place for such content. The notification-sending component does not check that the subject of the notification can be seen by the...
6.8CVSS6.7AI score0.00397EPSS
SaveExploits0References2
CVE-2009-4339
SQL injection vulnerability in the Subscription mfsubscription extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
7.5CVSS8.4AI score0.01051EPSS
SaveExploits0References3
20