Ilia Alshanetsky
Ilia Alshanetsky Fudforum: vulnerabilidades y CVE
Ilia Alshanetsky Fudforum tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2013-5309 | Baja (2.6) | 1.2% | — | 16 ago 2013 | Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web script or HTML via a… |
| CVE-2005-2781 | Alta (7.5) | 1.9% | — | 2 sept 2005 | The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed… |
| CVE-2005-2600 | Media (5) | 1.6% | — | 17 ago 2005 | FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter. |
| CVE-2002-1422 | Media (5) | 6.6% | — | 11 abr 2003 | admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters. |
| CVE-2002-1421 | Alta (7.5) | 2.1% | — | 11 abr 2003 | SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php, (2) selmsg.php, and (3) showposts.php. |
| CVE-2002-1423 | Media (5) | 3.5% | — | 11 abr 2003 | tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter. |