Leszek Krupinski L-Forum
4 CVEs affecting Leszek Krupinski L-Forum. Latest disclosed: 2003-06-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2002-1460 | | 2003-06-09 | L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST (attachment, attachment_name, att… | |
CVE-2002-1459 | | 2003-06-09 | Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary s… | |
CVE-2002-1458 | | 2003-06-09 | Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary sc… | |
CVE-2002-1457 | | 2003-06-09 | SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter. |