Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2006-6038
Disclosure Date: November 22, 2006 (last updated October 04, 2023)
SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2004-1716
Disclosure Date: August 16, 2004 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IRC Server or (2) AIM ID fields in the user profile.
0
Attacker Value
Unknown
CVE-2002-0319
Disclosure Date: June 25, 2002 (last updated February 22, 2025)
Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a username.
0
Attacker Value
Unknown
CVE-2002-0287
Disclosure Date: May 31, 2002 (last updated February 22, 2025)
pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default.
0
