Bmforum

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bmforum records in CISA KEV

No Bmforum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bmforum 2 records LOW

Records

2 records

TI-2008-05785 CVE-2008-6091 · GHSA-xw84-2x9q-x3m5

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is…

LOW 32

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tagname parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00909 Published 2009-02-09 No fix listed CWE-89

TI-2008-06122 CVE-2008-6431 · GHSA-jggr-wh5p-v9vq

Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01823 Published 2009-03-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0