Vulnerabilities

TI-2004-02073 CVE-2004-2201 · GHSA-mmhx-4q4c-qfq9

SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail.asp, or (3) password…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0129 Published 2005-07-10 No fix listed

TI-2004-02072 CVE-2004-2200 · GHSA-45vf-ccx3-9p8v

Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary web script or HTML via via the message text.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01938 Published 2005-07-10 No fix listed

TI-2005-01936 CVE-2005-2048 · GHSA-pvmg-9g4x-3wv7

Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other…

LOW 37

Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) iMsg parameter to messages.asp, iFor parameter to (2) post.a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02438 Published 2005-06-22 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to…

Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote…

Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other…