Vulnerabilities

TI-2006-04432 CVE-2006-4586 · GHSA-7mxv-wg42-xmh4

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication…

LOW 31

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id para…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.03256 Published 2006-09-06 No fix listed

TI-2006-04431 CVE-2006-4585 · GHSA-cv9h-h9xp-8q7j

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote…

MEDIUM 44

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02473 Published 2006-09-06 No fix listed

TI-2006-04430 CVE-2006-4584 · GHSA-w79m-865p-4wjv

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative…

MEDIUM 40

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04782 Published 2006-09-06 No fix listed

Vulnerabilities

Filters

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication…

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote…

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative…