Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

phorum phorum 5.0.7 beta vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-3381
Cross-site request forgery (CSRF) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
NA
CVE-2011-3382
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
NA
CVE-2011-3392
Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum prior to 5.2.17 allows remote malicious users to inject arbitrary web script or HTML via the real_name parameter.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 5.2.15Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13
NA
CVE-2010-1629
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.15 allows remote malicious users to inject arbitrary web script or HTML via an invalid email address.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1a
NA
CVE-2009-0488
Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.10 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a Beta
NA
CVE-2008-1486
SQL injection vulnerability in Phorum prior to 5.2.6, when mysql_use_ft is disabled, allows remote malicious users to execute arbitrary SQL commands via the non-fulltext search.
Phorum Phorum 5.0.15Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.2Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 5.0.7a BetaPhorum Phorum 5.0.17Phorum Phorum 5.0.17aPhorum Phorum 5.1.25Phorum Phorum 5.0.18Phorum Phorum 5.0.4a BetaPhorum Phorum 5.1.18Phorum Phorum 5.2.4Phorum Phorum 5.2.3Phorum Phorum 5.0.12Phorum PhorumPhorum Phorum 5.0.20Phorum Phorum 5.1.20
NA
CVE-2006-3611
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then i...
Phorum Phorum 3.2.2Phorum PhorumPhorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.0.1 AlphaPhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a BetaPhorum Phorum 3.4.4Phorum Phorum 5.0.17Phorum Phorum 5.0.17a
NA
CVE-2006-3053
PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is ...
Phorum Phorum 3.2.2Phorum Phorum 3.1.1 PrePhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 3.4.4Phorum Phorum 5.0.17aPhorum Phorum 3.3.1Phorum Phorum 3.4Phorum Phorum 3.3.2Phorum Phorum 3.1.1 Rc2Phorum Phorum 5.0.18Phorum Phorum 3.1.1aPhorum Phorum 3.4.5Phorum Phorum 5.0.12Phorum Phorum 3.4.8aPhorum Phorum 3.2.5
NA
CVE-2005-3543
SQL injection vulnerability in search.php in Phorum 5.0.0alpha up to and including 5.0.20, when register_globals is enabled, allows remote malicious users to execute arbitrary SQL commands via the forum_ids parameter.
Phorum Phorum 5.0.15Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.0.13aPhorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.0.7a BetaPhorum Phorum 5.0.17Phorum Phorum 5.0.18Phorum Phorum 5.0.4a BetaPhorum Phorum 5.0.12Phorum Phorum 5.0.20Phorum Phorum 5.0.0 AlphaPhorum Phorum 5.0.16Phorum Phorum 5.0.10Phorum Phorum 5.0.11Phorum Phorum 5.0.14aPhorum Phorum 5.0.9Phorum Phorum 5.0.14Phorum Phorum 5.0.7 BetaPhorum Phorum 5.0.6 BetaPhorum Phorum 5.0.3 Beta
NA
CVE-2005-2836
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," ...
Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 3.4.4Phorum Phorum 5.0.17Phorum Phorum 3.3.1Phorum Phorum 3.4Phorum Phorum 3.3.2Phorum Phorum 3.1.1 Rc2Phorum Phorum 4.3.7Phorum Phorum 3.1.1aPhorum Phorum 3.4.5Phorum Phorum 5.0.12Phorum Phorum 3.2.5Phorum Phorum 3.2.3a
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-33545CVE-2024-35725CVE-2024-32704overflowfile uploadCVE-2024-0230CVE-2024-32705CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook