SQL injection vulnerability in editpost.php in phpMyForum before 4.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information.
Search vulnerabilities
CVE-2007-4107
CVSS 2.0 · 7.5 High
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2006-1713
Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS 2.0 · 6.8 Medium
EPSS 2.0%
KEV · Not listed
Vendors
Products
CVE-2006-1714
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter.
CVSS 2.0 · 7.5 High
EPSS 2.7%
KEV · Not listed
Vendors
Products
CVE-2006-3149
Cross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.
CVSS 2.0 · 4.3 Medium
EPSS 1.3%
KEV · Not listed
Vendors
Products
Page 1 of 1.