|
Identifier
|
Related Record |
Severity
|
Date Published
|
Description | Versions Affected |
|---|---|---|---|---|---|
| CVE-2018-13000 | BDSA-2018-4974 | Medium | Jun 29, 2018 | An XSS issue was discovered in Advanced Electron Forum (AEF) v1.0.9. A persistent XSS vulnerability is located in the `FTP Link` element of the `Privat more... |
1.0.9
|
| CVE-2011-3582 | High | Jan 22, 2020 | A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive t more... |
1.0.9, 1.0.8, 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.0.2, 1.0.1
|
|
| BDSA-2016-0889 | Critical | Dec 04, 2017 | Advanced Electron Forum (*AEF*) is a bulletin board software. It contains a cross-site request forgery (*CSRF*) vulnerability that leads to remote file more... | ||
| BDSA-2016-0872 | Critical | Oct 25, 2017 | Advanced Electron Forum (*AEF*) is a bulletin board software. It contains a cross-site scripting (*XSS*) vulnerability due to the improper validation o more... |