Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vanillaforums vanilla 2.0.18.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-4954
The edit-profile page in Vanilla Forums prior to 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue.
Vanillaforums Vanilla 2.0.17.4Vanillaforums Vanilla 2.0.16Vanillaforums Vanilla 2.0.15Vanillaforums Vanilla 2.0.18Vanillaforums Vanilla 2.0.18.1Vanillaforums Vanilla 2.0.17.10Vanillaforums Vanilla 2.0.7Vanillaforums Vanilla 2.0.6Vanillaforums Vanilla 2.0.17.5Vanillaforums Vanilla 2.0.17.2Vanillaforums Vanilla 2.0.14Vanillaforums Vanilla 2.0.13Vanillaforums Vanilla 2.0.17.9Vanillaforums Vanilla 2.0.17.8Vanillaforums Vanilla 2.0.5Vanillaforums Vanilla 2.0.4Vanillaforums Vanilla 2.0.17Vanillaforums Vanilla 2.0.9Vanillaforums Vanilla 2.0.10Vanillaforums VanillaVanillaforums Vanilla 2.0.18.3Vanillaforums Vanilla 2.0.16.1
NA
CVE-2013-3527
Multiple SQL injection vulnerabilities in Vanilla Forums prior to 2.0.18.8 allow remote malicious users to execute arbitrary SQL commands via the parameter name in the Form/Email array to (1) entry/signin or (2) entry/passwordrequest.
Vanillaforums Vanilla 2.0.18.3Vanillaforums Vanilla 2.0.18.1Vanillaforums Vanilla 2.0.18Vanillaforums Vanilla 2.0.17.4Vanillaforums Vanilla 2.0.17.8Vanillaforums Vanilla 2.0.17.9Vanillaforums Vanilla 2.0.12Vanillaforums Vanilla 2.0.11Vanillaforums Vanilla 2.0.4Vanillaforums Vanilla 2.0.3Vanillaforums VanillaVanillaforums Vanilla 2.0.18.6Vanillaforums Vanilla 2.0.18.5Vanillaforums Vanilla 2.0.18.4Vanillaforums Vanilla 2.0.17Vanillaforums Vanilla 2.0.17.10Vanillaforums Vanilla 2.0.15Vanillaforums Vanilla 2.0.14Vanillaforums Vanilla 2.0.13Vanillaforums Vanilla 2.0.6Vanillaforums Vanilla 2.0.5Vanillaforums Vanilla 2.0.17.3
NA
CVE-2013-3528
Unspecified vulnerability in the update check in Vanilla Forums prior to 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
Vanillaforums Vanilla 2.0.18.4Vanillaforums Vanilla 2.0.18.3Vanillaforums Vanilla 2.0.18Vanillaforums Vanilla 2.0.17.10Vanillaforums Vanilla 2.0.17.8Vanillaforums Vanilla 2.0.14Vanillaforums Vanilla 2.0.13Vanillaforums Vanilla 2.0.5Vanillaforums Vanilla 2.0.4Vanillaforums Vanilla 2.0.18.6Vanillaforums Vanilla 2.0.18.5Vanillaforums Vanilla 2.0.17.1Vanillaforums Vanilla 2.0.17Vanillaforums Vanilla 2.0.16.1Vanillaforums Vanilla 2.0.15Vanillaforums Vanilla 2.0.7Vanillaforums Vanilla 2.0.6Vanillaforums VanillaVanillaforums Vanilla 2.0.17.2Vanillaforums Vanilla 2.0.17.3Vanillaforums Vanilla 2.0.17.7Vanillaforums Vanilla 2.0.16
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook