Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phorum phorum 5.0.14a vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-0843
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote malicious users to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.
Phorum Phorum 5.0.14a
NA
CVE-2005-3543
SQL injection vulnerability in search.php in Phorum 5.0.0alpha up to and including 5.0.20, when register_globals is enabled, allows remote malicious users to execute arbitrary SQL commands via the forum_ids parameter.
Phorum Phorum 5.0.13Phorum Phorum 5.0.13aPhorum Phorum 5.0.19Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.7 BetaPhorum Phorum 5.0.7a BetaPhorum Phorum 5.0.8 RcPhorum Phorum 5.0.1 AlphaPhorum Phorum 5.0.10Phorum Phorum 5.0.15Phorum Phorum 5.0.16Phorum Phorum 5.0.4 BetaPhorum Phorum 5.0.4a BetaPhorum Phorum 5.0.11Phorum Phorum 5.0.12Phorum Phorum 5.0.17Phorum Phorum 5.0.18Phorum Phorum 5.0.5 BetaPhorum Phorum 5.0.6 BetaPhorum Phorum 5.0.0 AlphaPhorum Phorum 5.0.14Phorum Phorum 5.0.14a
NA
CVE-2008-1486
SQL injection vulnerability in Phorum prior to 5.2.6, when mysql_use_ft is disabled, allows remote malicious users to execute arbitrary SQL commands via the non-fulltext search.
Phorum Phorum 5.0.15Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.2Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 5.0.7a BetaPhorum Phorum 5.0.17Phorum Phorum 5.0.17aPhorum Phorum 5.1.25Phorum Phorum 5.0.18Phorum Phorum 5.0.4a BetaPhorum Phorum 5.1.18Phorum Phorum 5.2.4Phorum Phorum 5.2.3Phorum Phorum 5.0.12Phorum PhorumPhorum Phorum 5.0.20Phorum Phorum 5.1.20
NA
CVE-2005-2836
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," ...
Phorum Phorum 3.1Phorum Phorum 3.1.1Phorum Phorum 3.1.1 PrePhorum Phorum 3.1.1 Rc2Phorum Phorum 3.3.1Phorum Phorum 3.3.1aPhorum Phorum 3.3.2Phorum Phorum 3.3.2aPhorum Phorum 5.0.12Phorum Phorum 5.0.14Phorum Phorum 5.0.14aPhorum Phorum 5.0.15Phorum Phorum 3.2.3Phorum Phorum 3.2.3aPhorum Phorum 3.2.3bPhorum Phorum 3.2.4Phorum Phorum 3.4.4Phorum Phorum 3.4.5Phorum Phorum 3.4.6Phorum Phorum 3.4.7Phorum Phorum 5.0.9Phorum Phorum 3.1.1a
NA
CVE-2006-3611
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then i...
Phorum Phorum 3.2.2Phorum PhorumPhorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.0.1 AlphaPhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a BetaPhorum Phorum 3.4.4Phorum Phorum 5.0.17Phorum Phorum 5.0.17a
NA
CVE-2009-0488
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.10 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a Beta
NA
CVE-2011-3381
Cross-site request forgery (CSRF) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
NA
CVE-2011-3382
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
NA
CVE-2010-1629
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.15 allows remote malicious users to inject arbitrary web script or HTML via an invalid email address.
Phorum Phorum 5.2.9Phorum Phorum 5.2.10Phorum Phorum 5.2.2Phorum Phorum 5.1.25Phorum Phorum 3.4.8Phorum Phorum 3.4.5Phorum Phorum 3.3.2b3Phorum Phorum 3.4Phorum Phorum 3.2.6Phorum Phorum 3.2.5Phorum Phorum 3.1.2Phorum Phorum 3.1.1aPhorum Phorum 5.1.14Phorum Phorum 5.1.17Phorum Phorum 5.0.4a BetaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.0.17Phorum Phorum 5.0.14Phorum Phorum 5.0.12Phorum Phorum 5.2.11Phorum Phorum 5.2.4
NA
CVE-2011-3392
Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum prior to 5.2.17 allows remote malicious users to inject arbitrary web script or HTML via the real_name parameter.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 5.2.15Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4367CVE-2024-35977CVE-2023-49335man-in-the-middleCVE-2024-4947CVE-2024-31714memory leakSQLCVE-2024-35994
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook