Vulnerabilities

TI-2017-13537 CVE-2017-18364 · GHSA-7qg6-g6wf-59gq

phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.

LOW 35

phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.

CVSS 3.0HIGH 7.4 Network No auth User interaction EPSS 0.01357 Published 2019-03-27 No fix listed CWE-79

TI-2009-04433 CVE-2009-4677 · GHSA-6cf8-hpm3-vqrm

Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4…

LOW 22

Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2010-03-08 No fix listed CWE-79

TI-2009-02019 CVE-2009-2112 · GHSA-w2mm-2636-p44v

Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote…

MEDIUM 41

Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _FORUM[settings_design_style] param…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05692 Published 2009-06-18 No fix listed CWE-22

Vulnerabilities

Filters

phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.

Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4…

Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote…