VendorsIlia Alshanetskyfudforum1.9.8
Vulnerabilities

Ilia Alshanetsky FUDForum 1.9.8

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2002-1421
SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php, (2) selmsg.php, and (3) showposts.php.
Published 2003-03-18 · Modified
7.5EPSS 0.021
CVE-2002-1422
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.
Published 2003-03-18 · Modified
5.01 PoCEPSS 0.066
CVE-2002-1423
tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.
Published 2003-03-18 · Modified
5.01 PoCEPSS 0.035
CVE-2013-5309
Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web script or HTML via a custom profile field to index.php. NOTE: some of these details are obtained from third party information.
Published 2013-08-16 · Modified
2.6EPSS 0.012