Vulnerabilities

TI-2011-04415 CVE-2011-5138 · GHSA-4g6q-6335-5gfp

Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a viewprofile action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0096 Published 2012-08-31 No fix listed CWE-79

TI-2011-04414 CVE-2011-5137 · GHSA-9rmc-rhrc-35vg

Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL commands via the (1) TopicID parameter to viewtopic.php, the (2) BoardID parameter to viewboard.php, or (3) CatID pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01199 Published 2012-08-31 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote…

Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute…