Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phorum phorum 3.4.8a vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-3053
PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is ...
Phorum Phorum 3.2.2Phorum Phorum 3.1.1 PrePhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 3.4.4Phorum Phorum 5.0.17aPhorum Phorum 3.3.1Phorum Phorum 3.4Phorum Phorum 3.3.2Phorum Phorum 3.1.1 Rc2Phorum Phorum 5.0.18Phorum Phorum 3.1.1aPhorum Phorum 3.4.5Phorum Phorum 5.0.12Phorum Phorum 3.4.8aPhorum Phorum 3.2.5
NA
CVE-2006-3611
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then i...
Phorum Phorum 3.2.2Phorum PhorumPhorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.0.1 AlphaPhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a BetaPhorum Phorum 3.4.4Phorum Phorum 5.0.17Phorum Phorum 5.0.17a
NA
CVE-2009-0488
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.10 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a Beta
NA
CVE-2011-3381
Cross-site request forgery (CSRF) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
NA
CVE-2011-3382
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
NA
CVE-2010-1629
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.15 allows remote malicious users to inject arbitrary web script or HTML via an invalid email address.
Phorum Phorum 5.2.9Phorum Phorum 5.2.10Phorum Phorum 5.2.2Phorum Phorum 5.1.25Phorum Phorum 3.4.8Phorum Phorum 3.4.5Phorum Phorum 3.3.2b3Phorum Phorum 3.4Phorum Phorum 3.2.6Phorum Phorum 3.2.5Phorum Phorum 3.1.2Phorum Phorum 3.1.1aPhorum Phorum 5.1.14Phorum Phorum 5.1.17Phorum Phorum 5.0.4a BetaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.0.17Phorum Phorum 5.0.14Phorum Phorum 5.0.12Phorum Phorum 5.2.11Phorum Phorum 5.2.4
NA
CVE-2011-3392
Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum prior to 5.2.17 allows remote malicious users to inject arbitrary web script or HTML via the real_name parameter.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 5.2.15Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4367CVE-2024-35977CVE-2023-49335man-in-the-middleCVE-2024-4947CVE-2024-31714memory leakSQLCVE-2024-35994
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook