M Phorum

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

M Phorum records in CISA KEV

No M Phorum vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in M Phorum · all components

TI-2006-01118 CVE-2006-1151 · GHSA-vgm6-6v2c-qf82

LOW 29

Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03506 Published 2006-03-10 No fix listed

TI-2006-01119 CVE-2006-1152 · GHSA-c3g3-48fc-554j

LOW 26

PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01453 Published 2006-03-10 No fix listed