Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phorum phorum vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-2338
Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum prior to 5.1.22 allows remote malicious users to perform unauthorized banlist deletions as an administrator via the delete parameter.
Phorum Phorum
1 EDB exploit
NA
CVE-2007-0767
Cross-site scripting (XSS) vulnerability in the core in Phorum prior to 5.1.18 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum
NA
CVE-2006-3615
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote malicious users to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable.
Phorum Phorum 5.1.14
NA
CVE-2006-6550
PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the db_file parameter. NOTE: CVE disputes this vulnerability because db_file is defined before use
Phorum Phorum 3.2.11
1 EDB exploit
NA
CVE-2004-2240
Multiple SQL injection vulnerabilities in Phorum 5.0.11 and previous versions allow remote malicious users to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.
Phorum Phorum 5.0.11
NA
CVE-2004-2241
Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and previous versions allows remote malicious users to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor'...
Phorum Phorum 5.0.11
NA
CVE-2004-2242
Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and previous versions, allows remote malicious users to inject arbitrary HTML or web script via the subject parameter.
Phorum Phorum 5.0.7 Beta
1 EDB exploit
NA
CVE-2004-2243
Phorum allows remote malicious users to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter, as demonstrated using profile.php. NOTE: the affected version was reported to be 4.3.7, but this may be erroneous.
Phorum Phorum 4.3.7
NA
CVE-2002-0352
Phorum 3.3.2 allows remote malicious users to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.
Phorum Phorum 3.3.2
NA
CVE-2005-0843
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote malicious users to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.
Phorum Phorum 5.0.14a
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »