CVE-2021-40509

Mô tả

Tham khảo

• packetstormsecurity.com/files/164045/jforum-2.7.0-Cross-Site-Scripting.html · Third Party Advisory
• seclists.org/fulldisclosure/2021/Sep/13 · Mailing List
• lists.openwall.net/full-disclosure/2021/09/03/7 · Exploit
• sourceforge.net/p/jforum2/code/934 · Patch

Lỗ hổng khác của jforum

• CVE-2022-26173CAO 8.8JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.page, which allo…
• CVE-2019-7550TRUNG BÌNH 5.3In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/…
• CVE-2012-5338TRUNG BÌNH 5.8Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks vi…
• CVE-2012-5337TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in jforum.page in JForum 2.1.9 allow remote attackers to inject arbitrary web script or …