Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

phorum phorum 5.0.3 beta vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2

CVE-2005-3543

SQL injection vulnerability in search.php in Phorum 5.0.0alpha up to and including 5.0.20, when register_globals is enabled, allows remote malicious users to execute arbitrary SQL commands via the forum_ids parameter.
Phorum Phorum 5.0.15Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.0.13aPhorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.0.7a BetaPhorum Phorum 5.0.17Phorum Phorum 5.0.18Phorum Phorum 5.0.4a BetaPhorum Phorum 5.0.12Phorum Phorum 5.0.20Phorum Phorum 5.0.0 AlphaPhorum Phorum 5.0.16Phorum Phorum 5.0.10Phorum Phorum 5.0.11Phorum Phorum 5.0.14aPhorum Phorum 5.0.9Phorum Phorum 5.0.14Phorum Phorum 5.0.7 BetaPhorum Phorum 5.0.6 BetaPhorum Phorum 5.0.3 Beta
6.8
CVSSv2

CVE-2008-1486

SQL injection vulnerability in Phorum prior to 5.2.6, when mysql_use_ft is disabled, allows remote malicious users to execute arbitrary SQL commands via the non-fulltext search.
Phorum Phorum 5.0.15Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.2Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 5.0.7a BetaPhorum Phorum 5.0.17Phorum Phorum 5.0.17aPhorum Phorum 5.1.25Phorum Phorum 5.0.18Phorum Phorum 5.0.4a BetaPhorum Phorum 5.1.18Phorum Phorum 5.2.4Phorum Phorum 5.2.3Phorum Phorum 5.0.12Phorum PhorumPhorum Phorum 5.0.20Phorum Phorum 5.1.20
5.5
CVSSv2

CVE-2006-3611

Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then i...
Phorum Phorum 3.2.2Phorum PhorumPhorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.0.1 AlphaPhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a BetaPhorum Phorum 3.4.4Phorum Phorum 5.0.17Phorum Phorum 5.0.17a
4.3
CVSSv2

CVE-2009-0488

Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.10 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 5.0.7a Beta
4.3
CVSSv2

CVE-2011-3392

Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum prior to 5.2.17 allows remote malicious users to inject arbitrary web script or HTML via the real_name parameter.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum PhorumPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 5.2.15Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13
6.8
CVSSv2

CVE-2011-3381

Cross-site request forgery (CSRF) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
4.3
CVSSv2

CVE-2011-3382

Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.16 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.2.14Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8
4.3
CVSSv2

CVE-2010-1629

Cross-site scripting (XSS) vulnerability in Phorum prior to 5.2.15 allows remote malicious users to inject arbitrary web script or HTML via an invalid email address.
Phorum Phorum 5.2.10Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 5.2.5Phorum Phorum 5.0.1 AlphaPhorum Phorum 5.2.9Phorum Phorum 5.2.12Phorum Phorum 3.4.6Phorum Phorum 5.2.2Phorum Phorum 3.2.3Phorum Phorum 5.0.13aPhorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 5.0.2 AlphaPhorum Phorum 5.0.5 BetaPhorum Phorum 5.0.19Phorum Phorum 5.1.13Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1a
7.5
CVSSv2

CVE-2006-3053

PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is ...
Phorum Phorum 3.2.2Phorum Phorum 3.1.1 PrePhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 5.0.15aPhorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 3.4.4Phorum Phorum 5.0.17aPhorum Phorum 3.3.1Phorum Phorum 3.4Phorum Phorum 3.3.2Phorum Phorum 3.1.1 Rc2Phorum Phorum 5.0.18Phorum Phorum 3.1.1aPhorum Phorum 3.4.5Phorum Phorum 5.0.12Phorum Phorum 3.4.8aPhorum Phorum 3.2.5
4.3
CVSSv2

CVE-2005-2836

Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," ...
Phorum Phorum 3.2.2Phorum Phorum 5.0.15Phorum Phorum 3.1.1 PrePhorum Phorum 3.4.6Phorum Phorum 3.2.3Phorum Phorum 3.2.7Phorum Phorum 3.4.3Phorum Phorum 3.1.1Phorum Phorum 3.2.8Phorum Phorum 3.3.1aPhorum Phorum 3.4.4Phorum Phorum 5.0.17Phorum Phorum 3.3.1Phorum Phorum 3.4Phorum Phorum 3.3.2Phorum Phorum 3.1.1 Rc2Phorum Phorum 4.3.7Phorum Phorum 3.1.1aPhorum Phorum 3.4.5Phorum Phorum 5.0.12Phorum Phorum 3.2.5Phorum Phorum 3.2.3a
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4541CVE-2024-3080CVE-2024-4787log injectionCVE-2024-5967injectCVE-2024-30078CVE-2024-5899
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook