Vulnerabilities > Forum ONE
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-10-03 | CVE-2006-5105 | Remote Security vulnerability in Forum ONE Syntaxcms 1.1.1/1.2.1/1.3 Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the init_path parameter to admin/testing/tests/0030_init_syntax.php, or (2) an unspecified parameter to admin/testing/index.php. | 7.5 |
| 2006-09-28 | CVE-2006-5055 | Code Injection vulnerability in Forum ONE Syntaxcms 1.1.1/1.1.2/1.2.1 PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the init_path parameter. | 7.5 |
| 2005-12-22 | CVE-2005-4496 | Cross-Site Scripting vulnerability in SyntaxCMS Search Query Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. network forum-one | 4.3 |