PatchTheCVEtr forum vulnerabilities and fixes
Recent CVEs affecting tr forum, with upgrade or downgrade steps. 3 tracked.
Also searched as: trforum.
tr forum has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-09-06. Highest priority: CVE-2006-4585 (score 58/100).
- CVE-2006-4586 MEDIUM 5.5 DOWNGRADE The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote a
- CVE-2006-4585 HIGH 9.0 DOWNGRADE SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute a
- CVE-2006-4584 HIGH 7.5 DOWNGRADE Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login
FAQ
How do I fix tr forum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tr forum being exploited right now?
None of the tracked tr forum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tr forum CVE should I patch first?
CVE-2006-4585 currently ranks highest (58/100): SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute a.