Max Kervin Kervinet Forum
5 CVEs affecting Max Kervin Kervinet Forum. Latest disclosed: 2009-07-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-2329 | | 2009-07-05 | KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin/head.php, or (2) voting_diagram.php, (… | |
CVE-2009-2328 | | 2009-07-05 | admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary account… | |
CVE-2009-2327 | | 2009-07-05 | Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject arbitrary web script o… | |
CVE-2009-2326 | | 2009-07-05 | Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) an enter_parol cookie… | |
CVE-2007-6727 | | 2009-07-05 | SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter. |