Xeforum

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xeforum records in CISA KEV

No Xeforum vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Xeforum · all components

TI-2007-03393 CVE-2007-3500 · GHSA-rmwv-2j93-7282

MEDIUM 49

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03314 Published 2007-06-29 No fix listed CWE-264