RSS   Podatności dla 'Fuzzylime forum'   RSS

2007-06-19
 
CVE-2007-3267

CWE-Other
 
 
Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inject arbitrary web script or HTML via the fromaction parameter in a log action, a different vector than CVE-2007-3235.

 
2007-06-14
 
CVE-2007-3235

 
 
Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary web script or HTML via the topic parameter. NOTE: this might be resultant from SQL injection.

 
 
CVE-2007-3234

 
 
SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the topic parameter.

 

Copyright 2024, cxsecurity.com

 

Back to Top