📦

forums

Vendor: allaire

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 0 Remote Access
Total CVEs 7 Total Indexed
Avg. EPSS 4.17% Exploit Prob.
Latest CVE CVE-2012-4920 Apr 04

Security Vulnerability Index

Page 1 / 1
5.0 CVSS
CVE-2012-4920

Directory traversal vulnerability in the zing_forum_output function in forum.php in the Zingiri Forum (aka Forums) plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter to index.php.

EPSS: 3.20%
7.5 CVSS
CVE-2002-0108

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

EPSS: 3.28%
5.0 CVSS
CVE-1999-0800
Exploit Found

The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.

EPSS: 7.65%
6.4 CVSS
CVE-2000-0297

Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.

EPSS: 2.55%