Zorum@3.4 Security Vulnerabilities and Issues — Zorum@3.4 CVE List

Lucene search

PhpoutsourcingZorum3.4

5 matches found

CVE•added 2006/01/05 11:0 a.m.•39 views

CVE-2005-4619

SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.

7.5CVSS8.4AI score0.00329EPSS

CVE•added 2005/05/02 4:0 a.m.•37 views

CVE-2005-0675

Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters.

4.3CVSS5.8AI score0.00351EPSS

CVE•added 2005/03/07 5:0 a.m.•36 views

CVE-2003-1089

index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.

5CVSS7.2AI score0.03573EPSS

CVE•added 2006/06/30 11:5 p.m.•33 views

CVE-2006-3332

SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters.

7.5CVSS8.4AI score0.00502EPSS

CVE•added 2005/03/07 5:0 a.m.•30 views

CVE-2003-1088

Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter.

4.3CVSS6AI score0.0053EPSS