John Andersson Zixforum — known CVE vulnerabilities

Every CVE whose affected-product data names John Andersson Zixforum, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2005-4334 — CVSS 7.5 (high): SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter to (1)…
• CVE-2006-2541 — CVSS 7.5 (high): SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid…
• CVE-2006-4612 — CVSS 7.5 (high): SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId…