Dcforum

dcforum

Vendor: Dcscripts • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-4311 1Dcscripts 1Dcforum Apr 16, 2026 Dec 17, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecifie...Show more Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters.Show less
CVE-2002-0226 1Dcscripts 1Dcforum Apr 16, 2026 May 16, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate...Show more retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.Show less
CVE-2001-0527 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Aug 14, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (\|) and newlines into the last name in the registration form, which will create an extra entry i...Show more DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (\|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.Show less
CVE-2001-0437 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Jul 2, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.
CVE-2001-0436 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Jul 2, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.
CVE-2000-1132 1Dcscripts 1Dcforum Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 6.4 MEDIUM· v2 DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.