PatchTheCVEtforum vulnerabilities and fixes
Recent CVEs affecting tforum, with upgrade or downgrade steps. 3 tracked.
tforum has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2012-08-31. Highest priority: CVE-2007-0642 (score 52/100).
- CVE-2011-5138 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote attackers to inject arbi
- CVE-2011-5137 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL comman
- CVE-2007-0642 HIGH 7.5 DOWNGRADE SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL - ASP) allows rem
FAQ
How do I fix tforum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tforum being exploited right now?
None of the tracked tforum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tforum CVE should I patch first?
CVE-2007-0642 currently ranks highest (52/100): SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL - ASP) allows rem.