PatchTheCVEcoolforum vulnerabilities
Recent CVEs affecting coolforum products. 6 tracked.
coolforum has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2006-06-06. Highest priority: CVE-2005-0855 (score 61/100).
- CVE-2006-2867 HIGH 7.5 UPGRADE SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to exe
- CVE-2005-0858 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrar
- CVE-2005-0857 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers t
- CVE-2005-0856 HIGH 7.5 UPGRADE CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1
- CVE-2005-0855 HIGH 10.0 UPGRADE CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct reque
- CVE-2002-1515 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrar
FAQ
How do I fix coolforum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is coolforum being exploited right now?
None of the tracked coolforum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which coolforum CVE should I patch first?
CVE-2005-0855 currently ranks highest (61/100): CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct reque.