Vulnerabilities

TI-2008-00089 CVE-2008-0099 · GHSA-pmj3-ch3j-mv8h

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote…

LOW 32

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the searchtext parameter to search.php, and unspecified other vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0085 Published 2008-01-08 No fix listed CWE-89

TI-2005-01327 CVE-2005-1404 · GHSA-pq86-qv99-3c5r

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser…

LOW 26

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01604 Published 2005-05-03 No fix listed

TI-2005-00371 CVE-2005-0413 · GHSA-3mjc-8px4-f596

Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.p…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02085 Published 2005-02-14 No fix listed CWE-89

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote…

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser…

Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to…