Fudforum
Fudforum: vulnerabilidades y CVE
Fudforum tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-30950 | Baja (3.5) | 0.39% | — | 17 abr 2024 | A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /adm/admsql.php. |
| CVE-2024-30951 | Media (6.1) | 0.37% | — | 17 abr 2024 | FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php. |
| CVE-2022-30863 | Media (4.8) | 0.56% | — | 6 jun 2022 | FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Panel. |
| CVE-2022-30861 | Media (4.8) | 0.56% | — | 6 jun 2022 | FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature. |
| CVE-2022-30860 | Alta (7.2) | 25% | — | 6 jun 2022 | FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel. |
| CVE-2022-28545 | Media (5.4) | 0.47% | — | 6 may 2022 | FUDforum 3.1.1 is vulnerable to Stored XSS. |
| CVE-2021-27520 | Media (6.1) | 6.4% | — | 19 mar 2021 | A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter. |
| CVE-2021-27519 | Media (6.1) | 7.6% | — | 19 mar 2021 | A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter. |
| CVE-2013-2267 | Alta (7.2) | 8.8% | — | 27 ene 2020 | PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system. |
| CVE-2019-18839 | Crítica (9) | 5.4% | — | 13 nov 2019 | FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin… |
| CVE-2019-18873 | Crítica (9) | 8.2% | — | 12 nov 2019 | FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin… |
| CVE-2013-5309 | Baja (2.6) | 1.2% | — | 16 ago 2013 | Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web script or HTML via a… |