Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: ForU Clear all filters
TI-2024-00669 CVE-2024-0729 · GHSA-m426-263c-vx86

ForU CMS cms_admin.php sql injection

Priority HIGH 75

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00591 Published 2024-01-19 No fix listed CWE-89
TI-2024-00668 CVE-2024-0728 · GHSA-vhqw-mw84-hph6

ForU CMS channel.php file inclusion

Priority HIGH 75

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0073 Published 2024-01-19 No fix listed CWE-73
TI-2024-00388 CVE-2024-0426 · GHSA-9fvr-phwm-65hh

ForU CMS cms_template.php sql injection

Priority HIGH 81

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00657 Published 2024-01-11 No fix listed CWE-89
TI-2024-00387 CVE-2024-0425 · GHSA-23j7-2rxw-3q84

ForU CMS password recovery

Priority HIGH 66

A vulnerability classified as critical was found in ForU CMS up to 2020-06-23.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00742 Published 2024-01-11 No fix listed CWE-640
TI-2023-04835 CVE-2023-5259 · GHSA-4hwx-j5cw-j2hg

ForU CMS cms_admin.php denial of service

Priority MEDIUM 56

A vulnerability classified as problematic was found in ForU CMS.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0115 Published 2023-09-29 No fix listed CWE-404
TI-2023-04801 CVE-2023-5221 · GHSA-qvr3-gchp-26j6

ForU CMS index.php code injection

Priority HIGH 75

A vulnerability classified as critical has been found in ForU CMS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0149 Published 2023-09-27 No fix listed CWE-94
TI-2022-03615 CVE-2022-3943 · GHSA-7pvx-xp68-6vm5

ForU CMS cms_chip.php cross site scripting

Priority LOW 25

A vulnerability was found in ForU CMS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0039 Published 2022-11-11 No fix listed CWE-707