Vanilla Forums Vanilla 2.0.17.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:vanillaforums:vanilla:2.0.17.7:*:*:*:*:*:*:*

part: a version: 2.0.17.7 update: *

VendorVanillaforums (e59b661e-03d0-5928-b087-75b0895bb418)
ProductVanilla (7643dc8c-e1f4-59db-ad0b-7c9fe47202a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/vanilla/vanilla purl2cpe 2026-06-01 10:18:09.109438

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3528 vulnerable 2026-06-08 05:04:31.955926 Details available
Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
Published: 2013-05-10T21:00:00.000Z
Updated: 2024-08-06T16:14:56.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3527 vulnerable 2026-06-08 05:04:31.945918 Details available
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to (1) entry/signin or (2) entry/passwordrequest.
Published: 2013-05-10T21:00:00.000Z
Updated: 2024-08-06T16:14:56.610Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4954 vulnerable 2026-06-08 05:02:53.358963 Details available
The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue.
Published: 2012-11-15T11:00:00.000Z
Updated: 2024-08-06T20:50:18.236Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.