Vanilla Forums Vanilla 2.0.16
Approved changes feed: RSS · Atom
cpe:2.3:a:vanillaforums:vanilla:2.0.16:*:*:*:*:*:*:*
part: a version: 2.0.16 update: *
| Vendor | Vanillaforums (e59b661e-03d0-5928-b087-75b0895bb418) |
|---|---|
| Product | Vanilla (7643dc8c-e1f4-59db-ad0b-7c9fe47202a5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/vanilla/vanilla |
purl2cpe | 2026-06-01 10:18:09.109425 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-3528 |
vulnerable | 2026-06-08 05:04:31.955776 |
Details available
Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
Published: 2013-05-10T21:00:00.000Z
Updated: 2024-08-06T16:14:56.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3527 |
vulnerable | 2026-06-08 05:04:31.940864 |
Details available
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to (1) entry/signin or (2) entry/passwordrequest.
Published: 2013-05-10T21:00:00.000Z
Updated: 2024-08-06T16:14:56.610Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4954 |
vulnerable | 2026-06-08 05:02:53.353775 |
Details available
The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue.
Published: 2012-11-15T11:00:00.000Z
Updated: 2024-08-06T20:50:18.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3812 |
vulnerable | 2026-06-08 04:59:27.888408 |
Details available
Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files.
Published: 2011-09-24T00:00:00.000Z
Updated: 2024-09-17T00:45:29.223Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0910 |
vulnerable | 2026-06-08 04:56:40.181256 |
Details available
The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks.
Published: 2011-02-08T20:00:00.000Z
Updated: 2024-09-16T20:42:07.541Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0909 |
vulnerable | 2026-06-08 04:56:40.180713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0908 |
vulnerable | 2026-06-08 04:56:40.177507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.