Uniforum

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Uniforum records in CISA KEV

No Uniforum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Uniforum 2 records LOW

Records

2 records in Uniforum · all components

TI-2007-00219 CVE-2007-0226 · GHSA-rcv4-955j-5q98

SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote…

LOW 35

SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL commands via the "by User" field (aka the TXbyuser parameter).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01266 Published 2007-01-13 No fix listed

TI-2006-01360 CVE-2006-1406 · GHSA-6cgh-9j6m-f5pw

Multiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtuser or (2) txtpassword parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01296 Published 2006-03-28 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0