GCVE - cpe:2.3:a:pyforum:pyforum:1.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pyforum:pyforum:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4408`	vulnerable	2026-06-08 04:51:48.393636	Details available Multiple cross-site scripting (XSS) vulnerabilities in models.parser in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to inject arbitrary web script or HTML via crafted BBcode (1) img or (2) url tags, which are not properly handled when a post is viewed. Published: 2009-12-23T21:00:00.000Z Updated: 2024-08-07T07:01:20.253Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/54855 http://www.osvdb.org/61051 http://secunia.com/advisories/37764 http://www.securityfocus.com/archive/1/508478/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4407`	vulnerable	2026-06-08 04:51:48.393150	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to hijack the authentication of victims for requests that change passwords, and other unspecified requests, via unknown vectors. Published: 2009-12-23T21:00:00.000Z Updated: 2024-08-07T07:01:20.155Z Open on db.gcve.eu Reference links http://www.osvdb.org/61050 http://secunia.com/advisories/37764 https://exchange.xforce.ibmcloud.com/vulnerabilities/54853 http://www.securityfocus.com/archive/1/508478/100/0/threaded	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.