Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2013-3527

Disclosure Date: May 10, 2013 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to (1) entry/signin or (2) entry/passwordrequest.
0
0
Attacker Value
Unknown

CVE-2013-3528

Disclosure Date: May 10, 2013 (last updated October 05, 2023)
Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
0
0
Attacker Value
Unknown

CVE-2012-4954

Disclosure Date: November 15, 2012 (last updated October 05, 2023)
The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue.
0
0