Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phorum phorum 5.1.25 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-1486
SQL injection vulnerability in Phorum prior to 5.2.6, when mysql_use_ft is disabled, allows remote malicious users to execute arbitrary SQL commands via the non-fulltext search.
Phorum Phorum 5.0.15Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.2Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 5.0.7a BetaPhorum Phorum 5.0.17Phorum Phorum 5.0.17aPhorum Phorum 5.1.25Phorum Phorum 5.0.18Phorum Phorum 5.0.4a BetaPhorum Phorum 5.1.18Phorum Phorum 5.2.4Phorum Phorum 5.2.3Phorum Phorum 5.0.12Phorum PhorumPhorum Phorum 5.0.20Phorum Phorum 5.1.20
NA
CVE-2009-0488
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.10 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a Beta
NA
CVE-2011-3382
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
NA
CVE-2011-3381
Cross-site request forgery (CSRF) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
NA
CVE-2010-1629
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.15 allows remote malicious users to inject arbitrary web script or HTML via an invalid email address.
Phorum Phorum 5.2.9Phorum Phorum 5.2.10Phorum Phorum 5.2.2Phorum Phorum 5.1.25Phorum Phorum 3.4.8Phorum Phorum 3.4.5Phorum Phorum 3.3.2b3Phorum Phorum 3.4Phorum Phorum 3.2.6Phorum Phorum 3.2.5Phorum Phorum 3.1.2Phorum Phorum 3.1.1aPhorum Phorum 5.1.14Phorum Phorum 5.1.17Phorum Phorum 5.0.4a BetaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.0.17Phorum Phorum 5.0.14Phorum Phorum 5.0.12Phorum Phorum 5.2.11Phorum Phorum 5.2.4
NA
CVE-2011-3392
Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum prior to 5.2.17 allows remote malicious users to inject arbitrary web script or HTML via the real_name parameter.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 5.2.15Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333CVE-2024-33901CVE-2024-36001CVE-2024-2835firewallXPath injectionauthentication bypassCVE-2024-22120CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook