Tr Forum

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tr Forum records in CISA KEV

No Tr Forum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tr Forum 3 records MEDIUM

Records

3 records

TI-2006-04431 CVE-2006-4585 · GHSA-cv9h-h9xp-8q7j

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote…

MEDIUM 44

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02473 Published 2006-09-06 No fix listed

TI-2006-04430 CVE-2006-4584 · GHSA-w79m-865p-4wjv

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative…

MEDIUM 40

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04782 Published 2006-09-06 No fix listed

TI-2006-04432 CVE-2006-4586 · GHSA-7mxv-wg42-xmh4

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication…

LOW 31

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id para…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.03256 Published 2006-09-06 No fix listed

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0