Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fork-cms vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-5164
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS prior to 3.2.7 allow remote malicious users to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/mod...
Fork-cms Fork Cms 2.6.2Fork-cms Fork Cms 2.6.3Fork-cms Fork Cms 2.3.1Fork-cms Fork Cms 2.0.1Fork-cms Fork Cms 2.6.12Fork-cms Fork Cms 3.1.0Fork-cms Fork Cms 2.6.4Fork-cms Fork Cms 2.6.7Fork-cms Fork Cms 3.1.6Fork-cms Fork Cms 3.2.1Fork-cms Fork Cms 2.4.0Fork-cms Fork Cms 2.4.1Fork-cms Fork Cms 2.0.2Fork-cms Fork Cms 3.1.2Fork-cms Fork Cms 3.0.0Fork-cms Fork Cms 2.6.9Fork-cms Fork Cms 2.6.6Fork-cms Fork Cms 3.2.5Fork-cms Fork Cms 3.2.4Fork-cms Fork Cms 3.2.2Fork-cms Fork Cms 3.1.9Fork-cms Fork Cms 2.5.1
6.5
CVSSv2
CVE-2022-1064
SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms before 5.11.1.
Fork-cms Fork Cms
3.5
CVSSv2
CVE-2022-0145
Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms before 5.11.1.
Fork-cms Fork Cms
4.3
CVSSv2
CVE-2022-0153
SQL Injection in GitHub repository forkcms/forkcms before 5.11.1.
Fork-cms Fork Cms
4.3
CVSSv2
CVE-2012-1188
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS prior to 3.2.7 allow remote malicious users to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
Fork-cms Fork Cms
6.8
CVSSv2
CVE-2020-23264
Cross-site request forgery (CSRF) in Fork-CMS prior to 5.8.2 allow remote malicious users to hijack the authentication of logged administrators.
Fork-cms Fork Cms
6.5
CVSSv2
CVE-2020-24036
PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code.
Fork-cms Fork Cms
7.5
CVSSv2
CVE-2015-1467
Multiple SQL injection vulnerabilities in Translations in Fork CMS prior to 3.8.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) language[] or (2) type[] parameter to private/en/locale/index.
Fork-cms Fork Cms
4.3
CVSSv2
CVE-2020-13633
Fork prior to 5.8.3 allows XSS via navigation_title or title.
Fork-cms Fork Cms
4.3
CVSSv2
CVE-2014-9470
Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS prior to 3.8.4 allows remote malicious users to inject arbitrary web script or HTML via the q_widget parameter to en/search.
Fork-cms Fork Cms
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook