Approved changes feed: RSS · Atom

cpe:2.3:a:2enetworx:openforum:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor2Enetworx (d56040eb-ec47-5db1-9d4e-1d7a4dd25cd4)
ProductOpenforum (f1109625-66c5-54b6-906a-01dbf1b2e558)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0076 vulnerable 2026-06-08 04:49:31.404030 Details available
Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb.
Published: 2007-01-05T11:00:00.000Z
Updated: 2024-08-07T12:03:37.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3321 vulnerable 2026-06-08 04:49:08.910054 Details available
Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ofdisp and (2) ofmsgid parameters.
Published: 2006-06-30T10:00:00.000Z
Updated: 2024-08-07T18:23:21.184Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.