Ilia Alshanetsky Fudforum
6 CVEs affecting Ilia Alshanetsky Fudforum. Latest disclosed: 2013-08-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-5309 | | 2013-08-16 | Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows rem… | |
CVE-2005-2781 | | 2005-09-02 | The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a… | |
CVE-2005-2600 | | 2005-08-17 | FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a mo… | |
CVE-2002-1423 | | 2003-04-11 | tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter. | |
CVE-2002-1422 | | 2003-04-11 | admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters. | |
CVE-2002-1421 | | 2003-04-11 | SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php, (2) selmsg.php, a… |