← Back

Frank Karau

frank_karau

4 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Phpfk
phpfk
2 CVEs
Gl Sh Deaf Forum
gl-sh_deaf_forum
1 CVE
Phpfk Php Forum
phpfk_php_forum
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-18364
1Frank Karau
1Phpfk
Nov 21, 2024
Mar 27, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.
CVE-2009-4677
1Frank Karau
1Phpfk Php Forum
Apr 29, 2026
Mar 8, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is u...Show more
Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2009-2112
1Frank Karau
1Phpfk
Apr 23, 2026
Jun 18, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _FORUM[settings_design_style] param...Show more
Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _FORUM[settings_design_style] parameter.Show less
CVE-2007-3535
1Frank Karau
1Gl Sh Deaf Forum
Apr 23, 2026
Jul 3, 2007
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) FORUM_LANGUAGE parameter to functions.p...Show more
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) FORUM_LANGUAGE parameter to functions.php or the (2) style parameter to bottom.php.Show less