CVE Tools
Track your stack

Jffnms

5 CVEs tracked since 2007. Since Jun 2007, none of them reached CISA KEV.

Jffnms CVEs per month

Jun 2007 to Jun 2007. Point at a month, or focus the strip and use the arrow keys.
Jffnms CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2007-0650

Products

The products that kept showing up in Jffnms's monthly top three, with their CVEs summed over those months.

  1. Just For Fun Network Management System51 month

Latest CVEs

The 5 most recently published vulnerabilities affecting Jffnms.

  1. CVE-2007-3189Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter.4.3
  2. CVE-2007-3190Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL comma...6.8
  3. CVE-2007-3191Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function.9.4
  4. CVE-2007-3204SQL injection vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.4-pre2 allows remote attackers to execute arbitrary SQL commands via the pass parameter. NOTE: this i...7.5
  5. CVE-2007-3192admin/setup.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to read and modify configuration settings via a direct request.9.4

The record

Peak rank
#19 in Jun 2007
Busiest month shown
Jun 2007, 5 CVEs
Months with a KEV entry
0 since Jun 2007
Monthly snapshots
1 since 2007
Jffnms's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store