Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vanillaforums vanilla 2.0.17.9 vulnerabilities and exploits

(subscribe to this query)
3.5
CVSSv2
CVE-2012-4954
The edit-profile page in Vanilla Forums prior to 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue.
Vanillaforums Vanilla 2.0.17.4Vanillaforums Vanilla 2.0.16Vanillaforums Vanilla 2.0.15Vanillaforums Vanilla 2.0.18Vanillaforums Vanilla 2.0.18.1Vanillaforums Vanilla 2.0.17.10Vanillaforums Vanilla 2.0.7Vanillaforums Vanilla 2.0.6Vanillaforums Vanilla 2.0.17.5Vanillaforums Vanilla 2.0.17.2Vanillaforums Vanilla 2.0.14Vanillaforums Vanilla 2.0.13Vanillaforums Vanilla 2.0.17.9Vanillaforums Vanilla 2.0.17.8Vanillaforums Vanilla 2.0.5Vanillaforums Vanilla 2.0.4Vanillaforums Vanilla 2.0.17Vanillaforums Vanilla 2.0.9Vanillaforums Vanilla 2.0.10Vanillaforums VanillaVanillaforums Vanilla 2.0.18.3Vanillaforums Vanilla 2.0.16.1
7.5
CVSSv2
CVE-2013-3527
Multiple SQL injection vulnerabilities in Vanilla Forums prior to 2.0.18.8 allow remote malicious users to execute arbitrary SQL commands via the parameter name in the Form/Email array to (1) entry/signin or (2) entry/passwordrequest.
Vanillaforums Vanilla 2.0.18.3Vanillaforums Vanilla 2.0.18.1Vanillaforums Vanilla 2.0.18Vanillaforums Vanilla 2.0.17.4Vanillaforums Vanilla 2.0.17.8Vanillaforums Vanilla 2.0.17.9Vanillaforums Vanilla 2.0.12Vanillaforums Vanilla 2.0.11Vanillaforums Vanilla 2.0.4Vanillaforums Vanilla 2.0.3Vanillaforums VanillaVanillaforums Vanilla 2.0.18.6Vanillaforums Vanilla 2.0.18.5Vanillaforums Vanilla 2.0.18.4Vanillaforums Vanilla 2.0.17Vanillaforums Vanilla 2.0.17.10Vanillaforums Vanilla 2.0.15Vanillaforums Vanilla 2.0.14Vanillaforums Vanilla 2.0.13Vanillaforums Vanilla 2.0.6Vanillaforums Vanilla 2.0.5Vanillaforums Vanilla 2.0.17.3
7.5
CVSSv2
CVE-2013-3528
Unspecified vulnerability in the update check in Vanilla Forums prior to 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
Vanillaforums Vanilla 2.0.18.4Vanillaforums Vanilla 2.0.18.3Vanillaforums Vanilla 2.0.18Vanillaforums Vanilla 2.0.17.10Vanillaforums Vanilla 2.0.17.8Vanillaforums Vanilla 2.0.14Vanillaforums Vanilla 2.0.13Vanillaforums Vanilla 2.0.5Vanillaforums Vanilla 2.0.4Vanillaforums Vanilla 2.0.18.6Vanillaforums Vanilla 2.0.18.5Vanillaforums Vanilla 2.0.17.1Vanillaforums Vanilla 2.0.17Vanillaforums Vanilla 2.0.16.1Vanillaforums Vanilla 2.0.15Vanillaforums Vanilla 2.0.7Vanillaforums Vanilla 2.0.6Vanillaforums VanillaVanillaforums Vanilla 2.0.17.2Vanillaforums Vanilla 2.0.17.3Vanillaforums Vanilla 2.0.17.7Vanillaforums Vanilla 2.0.16
5
CVSSv2
CVE-2011-3613
An issue exists in Vanilla Forums prior to 2.0.17.9 due to the way cookies are handled.
Vanillaforums Vanilla
7.5
CVSSv2
CVE-2011-3614
An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums prior to 2.0.17.9.
Vanillaforums Vanilla
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook