Known Vulnerabilities for products from Codologic
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Codologic".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-31854 json | Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel... | 7.2 - HIGH | 2022-07-07 | 2022-10-28 |
| CVE-2020-25879 json | A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated atta... | 5.4 - MEDIUM | 2021-07-09 | 2021-07-15 |
| CVE-2020-25876 json | A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers t... | 5.4 - MEDIUM | 2021-07-09 | 2021-07-12 |
| CVE-2020-25875 json | A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers... | 5.4 - MEDIUM | 2021-07-09 | 2021-07-14 |
| CVE-2020-13873 json | A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attacker... | 9.8 - CRITICAL | 2021-05-12 | 2021-05-20 |
| CVE-2020-9007 json | Codoforum 4.8.8 allows self-XSS via the title of a new topic. | 5.4 - MEDIUM | 2020-02-16 | 2020-02-18 |
| CVE-2020-7051 json | Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 bec... | 6.1 - MEDIUM | 2020-02-13 | 2022-06-28 |
| CVE-2020-7050 json | Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add ... | 5.4 - MEDIUM | 2020-02-15 | 2022-06-28 |
| CVE-2020-5843 json | Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen. | 4.8 - MEDIUM | 2020-01-07 | 2020-01-08 |
| CVE-2020-5842 json | Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The p... | 6.1 - MEDIUM | 2020-01-07 | 2023-11-07 |
| CVE-2020-5306 json | Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content. | 4.8 - MEDIUM | 2020-01-05 | 2023-01-20 |
| CVE-2020-5305 json | Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen. | 4.8 - MEDIUM | 2020-01-05 | 2020-02-18 |
| CVE-2014-9261 json | The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allow... | Not Provided | 2015-03-23 | 2026-05-06 |
| CVE-2013-5952 json | Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (com_freichat) component, possibly 9.4 and earlier, for J... | Not Provided | 2014-03-19 | 2026-05-06 |
Known software with vulnerabilities from Codologic
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Codologic | Codoforum | - |
| Application | Codologic | Com Freichat | 9.4 |