3 results (0.002 seconds)

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

15 Mar 2002 — Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address. Allaire Forums 2.0.4 y 2.0.5 y Foros! 3.0 y 3.1 permiten a usuarios remotos autorizados suplantar la identidad de otros usuarios (Spoofing) para enviar mensajes modificando en el formulario los campos de nombre y dirección de correo. • http://online.securityfocus.com/archive/1/249026 •

CVSS: 7.5EPSS: 7%CPEs: 1EXPL: 2

12 Mar 2001 — The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm. • https://www.exploit-db.com/exploits/19193 •

CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0

03 Apr 2000 — Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables. • http://www.osvdb.org/1270 •