Search vulnerabilities

Results 4

Export CSV
CVE-2007-4107

SQL injection vulnerability in editpost.php in phpMyForum before 4.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2006-1713

Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2006-1714

CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter.

CVSS 2.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Products
CVE-2006-3149

Cross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Products