Approved changes feed: RSS · Atom

cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4_04:*:*:*:*:*:*:*

part: a version: 1.0.0_rc4_04 update: *

VendorMvnforum (66048c47-1d46-5733-9d3d-174d76877c79)
ProductMvnforum (cda67f91-81ab-5832-98d8-0e64e201a1b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/herearemypersonalprojects/mvnforum purl2cpe 2026-06-01 10:13:13.234946

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5400 vulnerable 2026-06-08 04:50:51.396225 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers.
Published: 2008-12-09T11:00:00.000Z
Updated: 2024-08-07T10:49:12.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3245 vulnerable 2026-06-08 04:49:08.691045 Details available
Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) member and (2) activatecode parameters.
Published: 2006-06-27T10:00:00.000Z
Updated: 2024-08-07T18:23:20.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.