Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phorum phorum vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2011-3622
A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum prior to 5.2.18.
Phorum Phorum
NA
CVE-2012-6659
Cross-site scripting (XSS) vulnerability in the admin interface in Phorum prior to 5.2.19 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.
Phorum Phorum
Phorum Phorum 5.2.10
Phorum Phorum 5.2.5
Phorum Phorum 5.2.9
Phorum Phorum 5.2.12
Phorum Phorum 5.2.2
Phorum Phorum 5.2.15
Phorum Phorum 5.2.14
Phorum Phorum 5.2.7
Phorum Phorum 5.2.6
Phorum Phorum 5.2.4
Phorum Phorum 5.2.3
Phorum Phorum 5.2
Phorum Phorum 5.2.13
Phorum Phorum 5.2.16
Phorum Phorum 5.2.8
Phorum Phorum 5.2.1
Phorum Phorum 5.2.11
NA
CVE-2012-4234
Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum prior to 5.2.19 allows remote malicious users to inject arbitrary web script or HTML via the group parameter.
Phorum Phorum
Phorum Phorum 5.2.10
Phorum Phorum 5.2.12
Phorum Phorum 5.2.15
Phorum Phorum 5.2.14
Phorum Phorum 5.2
Phorum Phorum 5.2.13
Phorum Phorum 5.2.16
Phorum Phorum 5.2.1
Phorum Phorum 5.2.11
1 EDB exploit
NA
CVE-2011-4561
Cross-site scripting (XSS) vulnerability in admin.php in Phorum 5.2.18 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to admin/index.php. NOTE: some of these details are obtained from third party information.
Phorum Phorum 5.2.18
1 EDB exploit
NA
CVE-2011-3768
Phorum 5.2.15a allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files.
Phorum Phorum 5.2.15a
NA
CVE-2011-3382
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 5.2.10
Phorum Phorum 3.2.2
Phorum Phorum 5.0.15
Phorum Phorum 3.1.1 Pre
Phorum Phorum 5.2.5
Phorum Phorum 5.0.1 Alpha
Phorum Phorum 5.2.9
Phorum Phorum 5.2.12
Phorum Phorum 3.4.6
Phorum Phorum 5.2.2
Phorum Phorum 3.2.3
Phorum Phorum 5.0.13a
Phorum Phorum 5.2.14
Phorum Phorum 5.0.15a
Phorum Phorum 3.2.7
Phorum Phorum 3.4.3
Phorum Phorum 5.0.2 Alpha
Phorum Phorum 5.0.5 Beta
Phorum Phorum 5.0.19
Phorum Phorum 5.1.13
Phorum Phorum 3.1.1
Phorum Phorum 3.2.8
NA
CVE-2011-3392
Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum prior to 5.2.17 allows remote malicious users to inject arbitrary web script or HTML via the real_name parameter.
Phorum Phorum 5.2.10
Phorum Phorum 3.2.2
Phorum Phorum 5.0.15
Phorum Phorum 3.1.1 Pre
Phorum Phorum 5.2.5
Phorum Phorum 5.0.1 Alpha
Phorum Phorum
Phorum Phorum 5.2.9
Phorum Phorum 5.2.12
Phorum Phorum 3.4.6
Phorum Phorum 5.2.2
Phorum Phorum 5.2.15
Phorum Phorum 3.2.3
Phorum Phorum 5.0.13a
Phorum Phorum 5.2.14
Phorum Phorum 5.0.15a
Phorum Phorum 3.2.7
Phorum Phorum 3.4.3
Phorum Phorum 5.0.2 Alpha
Phorum Phorum 5.0.5 Beta
Phorum Phorum 5.0.19
Phorum Phorum 5.1.13
NA
CVE-2011-3381
Cross-site request forgery (CSRF) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Phorum Phorum 5.2.10
Phorum Phorum 3.2.2
Phorum Phorum 5.0.15
Phorum Phorum 3.1.1 Pre
Phorum Phorum 5.2.5
Phorum Phorum 5.0.1 Alpha
Phorum Phorum 5.2.9
Phorum Phorum 5.2.12
Phorum Phorum 3.4.6
Phorum Phorum 5.2.2
Phorum Phorum 3.2.3
Phorum Phorum 5.0.13a
Phorum Phorum 5.2.14
Phorum Phorum 5.0.15a
Phorum Phorum 3.2.7
Phorum Phorum 3.4.3
Phorum Phorum 5.0.2 Alpha
Phorum Phorum 5.0.5 Beta
Phorum Phorum 5.0.19
Phorum Phorum 5.1.13
Phorum Phorum 3.1.1
Phorum Phorum 3.2.8
NA
CVE-2010-1629
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.15 allows remote malicious users to inject arbitrary web script or HTML via an invalid email address.
Phorum Phorum 5.2.10
Phorum Phorum 3.2.2
Phorum Phorum 5.0.15
Phorum Phorum 3.1.1 Pre
Phorum Phorum 5.2.5
Phorum Phorum 5.0.1 Alpha
Phorum Phorum 5.2.9
Phorum Phorum 5.2.12
Phorum Phorum 3.4.6
Phorum Phorum 5.2.2
Phorum Phorum 3.2.3
Phorum Phorum 5.0.13a
Phorum Phorum 5.0.15a
Phorum Phorum 3.2.7
Phorum Phorum 3.4.3
Phorum Phorum 5.0.2 Alpha
Phorum Phorum 5.0.5 Beta
Phorum Phorum 5.0.19
Phorum Phorum 5.1.13
Phorum Phorum 3.1.1
Phorum Phorum 3.2.8
Phorum Phorum 3.3.1a
NA
CVE-2009-0488
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.10 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 3.2.2
Phorum Phorum 5.0.15
Phorum Phorum 3.1.1 Pre
Phorum Phorum 5.2.5
Phorum Phorum 5.0.1 Alpha
Phorum Phorum
Phorum Phorum 5.2.9
Phorum Phorum 3.4.6
Phorum Phorum 5.2.2
Phorum Phorum 3.2.3
Phorum Phorum 5.0.13a
Phorum Phorum 5.0.15a
Phorum Phorum 3.2.7
Phorum Phorum 3.4.3
Phorum Phorum 5.0.2 Alpha
Phorum Phorum 5.0.5 Beta
Phorum Phorum 5.0.19
Phorum Phorum 5.1.13
Phorum Phorum 3.1.1
Phorum Phorum 3.2.8
Phorum Phorum 3.3.1a
Phorum Phorum 5.0.7a Beta
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »