ForU vulnerabilities
We track 5 vulnerabilities in ForU products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on January 19, 2024.
Latest ForU vulnerabilities
- 9.8 Critical severity
CMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. Affected by this issue is some unknown functionality of the file cms_admin.php. The manipulation of the argument a_name leads to sql injection. The exploit has been
- 9.8 Critical severity
CMS: Externally Controlled Reference to a Resource in Another Sphere
A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument c_cmodel leads to file inclusion. The attack can be launched
- 9.8 Critical severity
CMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cms_template.php. The manipulation of the argument t_name/t_path leads to sql injection. The attack may
- 7.5 High severity
CMS: Weak Password Recovery Mechanism for Forgotten Password
A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=reset_admin_psw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The
- 9.8 Critical severity
CMS: Improper Control of Generation of Code
A vulnerability classified as critical has been found in ForU CMS. This affects an unknown part of the file /install/index.php. The manipulation of the argument db_name leads to code injection. It is possible to initiate the attack remotely. The exploit has be