Fudforum

12 CVEs across 1 Fudforum products. Browse Fudforum vulnerabilities, severities, and proof-of-concept exploits.

Fudforum products with known CVEs

ProductCVEs
Fudforum12
Fudforum CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-30950Low3.52024-04-17A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected i…
CVE-2024-30951Medium6.12024-04-17FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php.
CVE-2022-30863Medium4.82022-06-06FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Panel.
CVE-2022-30861Medium4.82022-06-06FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature.
CVE-2022-30860High7.22022-06-06FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.
CVE-2022-28545Medium5.42022-05-06FUDforum 3.1.1 is vulnerable to Stored XSS.
CVE-2021-27520Medium6.12021-03-19A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter.
CVE-2021-27519Medium6.12021-03-19A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter.
CVE-2013-2267High7.22020-01-27PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system.
CVE-2019-18839Critical9.02019-11-13FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully comp…
CVE-2019-18873Critical9.02019-11-12FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to full…
CVE-2013-53092013-08-16Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows rem…