Ilia Alshanetsky : Security Vulnerabilities, CVEs, Published In 2005
The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.
Max CVSS
7.5
EPSS Score
2.23%
Published
2005-09-02
Updated
2018-10-19
FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter.
Max CVSS
5.0
EPSS Score
1.29%
Published
2005-08-17
Updated
2008-09-05
2 vulnerabilities found