Max Kervin Kervinet Forum — known CVE vulnerabilities

Every CVE whose affected-product data names Max Kervin Kervinet Forum, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2007-6727 — CVSS 7.5 (high): SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum…
• CVE-2009-2326 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1)…
• CVE-2009-2328 — CVSS 7.5 (high): admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to…
• CVE-2009-2329 — CVSS 5.0 (medium): KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin/head.php, or (2)…
• CVE-2009-2327 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject…