Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.5	EPSS 0.6%	CVE-2024-0729ForU CMS · SQL Injection Medium5.5EPSS 0.6%2024-01-19CVE Database V5CVE-2024-0729 A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. Affected by this issue is some unknown functionality of the file cms_admin.php. The manipulation of the argument a_name leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251552. EPSS 0.6%Vulnerability ForU #cwe-89	CVE Database V5	2024-01-19
Medium	5.3	EPSS 0.7%	CVE-2024-0425ForU CMS · Weak Password Recovery Medium5.3EPSS 0.7%2024-01-11CVE Database V5CVE-2024-0425 A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=reset_admin_psw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250444. EPSS 0.7%Vulnerability ForU #cwe-640	CVE Database V5	2024-01-11

Page 1 of 1