Beehive Forum

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-50910 CRITICAL POC Act Now

Beehive Forum 1.5.2 has host header injection in the forgot password function that allows intercepting password reset tokens. PoC available.

Code Injection Beehive Forum

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

0.5%

CVE-2015-2198 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) homepage_url, (2) pic_url, or. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS PHP Beehive Forum

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

0.9%

CVE-2012-0900 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) forum/register.php or (2). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Beehive Forum

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

3.7%

CVE-2022-50910

EPSS 0% CVSS 9.8

CRITICAL POC Act Now

Beehive Forum 1.5.2 has host header injection in the forgot password function that allows intercepting password reset tokens. PoC available.

Code Injection Beehive Forum

NVD Exploit-DB

CVE-2015-2198

EPSS 1% CVSS 4.3

MEDIUM POC This Month

XSS PHP Beehive Forum

NVD Exploit-DB

CVE-2012-0900

EPSS 4% CVSS 4.3

MEDIUM POC This Month

PHP XSS Beehive Forum

NVD Exploit-DB