Vulnerabilities

TI-2008-06122 CVE-2008-6431 · GHSA-jggr-wh5p-v9vq

Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01823 Published 2009-03-06 No fix listed CWE-79

TI-2008-05785 CVE-2008-6091 · GHSA-xw84-2x9q-x3m5

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is…

LOW 32

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tagname parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00909 Published 2009-02-09 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers…

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is…