PatchTheCVEmyforum vulnerabilities and fixes
Recent CVEs affecting myforum, with upgrade or downgrade steps. 4 tracked.
myforum has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-06-01. Highest priority: CVE-2008-5040 (score 53/100).
- CVE-2009-1852 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL
- CVE-2008-5040 HIGH 7.5 DOWNGRADE Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by settin
- CVE-2008-4780 MEDIUM 6.8 DOWNGRADE Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows
- CVE-2008-4760 MEDIUM 6.8 DOWNGRADE SQL injection vulnerability in lecture.php in Graphiks MyForum 1.3, when register_globals is enabled, allows r
FAQ
How do I fix myforum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is myforum being exploited right now?
None of the tracked myforum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which myforum CVE should I patch first?
CVE-2008-5040 currently ranks highest (53/100): Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by settin.