Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
anelectron advanced electron forum 1.0.6 vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2008-5090
Electron Inc. Advanced Electron Forum prior to 1.0.7 allows remote malicious users to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch.
Anelectron Advanced Electron Forum 1.0.2
Anelectron Advanced Electron Forum 1.0.1
Anelectron Advanced Electron Forum 1.0.4
Anelectron Advanced Electron Forum 1.0.3
Anelectron Advanced Electron Forum
Anelectron Advanced Electron Forum 1.0.5
1 EDB exploit
6.8
CVSSv2
CVE-2009-2545
SQL injection vulnerability in Advanced Electron Forum (AEF) 1.x, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the filename in an uploaded attachment. NOTE: the provenance of this information is unknown; the details are ob...
Anelectron Advanced Electron Forum 1.0.7
Anelectron Advanced Electron Forum 1.0.8
Anelectron Advanced Electron Forum 1.0.5
Anelectron Advanced Electron Forum 1.0.6
Anelectron Advanced Electron Forum 1.0.3
Anelectron Advanced Electron Forum 1.0.4
Anelectron Advanced Electron Forum 1.0.1
Anelectron Advanced Electron Forum 1.0.2
4.3
CVSSv2
CVE-2009-2546
Directory traversal vulnerability in Advanced Electron Forum (AEF) 1.x allows remote malicious users to determine the existence of arbitrary files via the avatargalfile parameter when changing an avatar, which leaks the existence of the file in an error message. NOTE: the provena...
Anelectron Advanced Electron Forum 1.0.1
Anelectron Advanced Electron Forum 1.0.2
Anelectron Advanced Electron Forum 1.0.7
Anelectron Advanced Electron Forum 1.0.8
Anelectron Advanced Electron Forum 1.0.5
Anelectron Advanced Electron Forum 1.0.6
Anelectron Advanced Electron Forum 1.0.3
Anelectron Advanced Electron Forum 1.0.4
4.3
CVSSv2
CVE-2008-1983
Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote malicious users to inject arbitrary web script or HTML via the beg parameter in a members action to index.php.
Anelectron Advanced Electron Forum 1.0.6
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700
CVE-2022-48689
CVE-2024-27956
CVE-2023-6363
SQL
NULL pointer dereference
CVE-2023-41830
CVE-2015-2051
arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started