Cfmagic

cfmagic

4 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Magic Forum Personal

magic_forum_personal

Magic Book Personal

magic_book_personal

Magic Book Professional

magic_book_professional

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-4177 1Cfmagic 2Magic Book Personal Magic Book Professional Apr 16, 2026 Dec 12, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter.
CVE-2005-4073 1Cfmagic 1Magic List Pro Apr 16, 2026 Dec 8, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter.
CVE-2005-4072 1Cfmagic 1Magic Forum Personal Apr 16, 2026 Dec 8, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search...Show more Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search For:" field.Show less
CVE-2005-4071 1Cfmagic 1Magic Forum Personal Apr 16, 2026 Dec 8, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread...Show more Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread, and (4) ThreadID parameters in view_thread.cfm.Show less