Vulnerabilities

TI-2005-03860 CVE-2005-4072 · GHSA-wr7r-934x-8mmg

Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier…

LOW 22

Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-12-08 No fix listed

TI-2005-03859 CVE-2005-4071 · GHSA-4mmr-48v9-3hxw

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier…

LOW 35

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01256 Published 2005-12-08 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier…

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier…