Approved changes feed: RSS · Atom

cpe:2.3:a:ilia_alshanetsky:fudforum:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

VendorIlia Alshanetsky (d89b874d-1714-539e-91b8-96edcd1979b4)
ProductFudforum (77f45a44-c357-5acc-8dd2-edbe1565695f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/fudforum/fudforum purl2cpe 2026-06-01 10:12:47.592849
pkg:sourceforge/fudforum purl2cpe 2026-06-01 10:12:47.592850

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5309 vulnerable 2026-06-08 05:04:51.170367 Details available
Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web script or HTML via a custom profile field to index.php. NOTE: some of these details are obtained from third party information.
Published: 2013-08-16T17:00:00.000Z
Updated: 2024-08-06T17:06:52.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1423 vulnerable 2026-06-08 04:46:23.726906 Details available
tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.
Published: 2003-03-18T05:00:00.000Z
Updated: 2024-08-08T03:26:27.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1422 vulnerable 2026-06-08 04:46:23.726539 Details available
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.
Published: 2003-03-18T05:00:00.000Z
Updated: 2024-08-08T03:26:28.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1421 vulnerable 2026-06-08 04:46:23.726076 Details available
SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php, (2) selmsg.php, and (3) showposts.php.
Published: 2003-03-18T05:00:00.000Z
Updated: 2024-08-08T03:26:27.550Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.