fudforum

Top products

The 12 most recently published vulnerabilities affecting fudforum.

• CVE-2024-30951FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php.6.1Apr 17, 2024
• CVE-2024-30950A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /ad...3.5Apr 17, 2024
• CVE-2022-30863FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Panel.4.8Jun 6, 2022
• CVE-2022-30861FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature.4.8Jun 6, 2022
• CVE-2022-30860FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.7.2Jun 6, 2022
• CVE-2022-28545FUDforum 3.1.1 is vulnerable to Stored XSS.5.4May 6, 2022
• CVE-2021-27519A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter.6.1Mar 19, 2021
• CVE-2021-27520A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter.6.1Mar 19, 2021
• CVE-2013-2267PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system.7.2Jan 27, 2020
• CVE-2019-18839FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request...9.0Nov 13, 2019
• CVE-2019-18873FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET requ...9.0Nov 12, 2019
• CVE-2013-5309Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web ...2.6Aug 16, 2013