Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

max_kervin / kervinet_forum CVEs

Beta · best-effort

5 CVEs tagged to max_kervin / kervinet_forum — 0 Critical, 3 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to max_kervin vendor archive

CVE-2009-2329

Published Jul 5, 2009

KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin/head.php, or (2) voting_diagram.php, (3) voting.php, (4) t…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-2328

Published Jul 5, 2009

admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary accounts and conduct SQL in…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2009-2327

Published Jul 5, 2009

Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the v_var…

CVSS 3.5 · Low

Vendor/product tagsBeta · best-effort

CVE-2009-2326

Published Jul 5, 2009

Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) an enter_parol cookie to index.php in an…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2007-6727

Published Jul 5, 2009

SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1