PatchTheCVEtforum vulnerabilities
Recent CVEs affecting tforum products. 2 tracked.
tforum has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2012-08-31. Highest priority: CVE-2011-5137 (score 48/100).
- CVE-2011-5138 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote attackers to inject arbi
- CVE-2011-5137 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL comman
FAQ
How do I fix tforum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tforum being exploited right now?
None of the tracked tforum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tforum CVE should I patch first?
CVE-2011-5137 currently ranks highest (48/100): Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL comman.