Max Kervin develops the Kervinet Forum web application, which exhibits a pattern of application-layer security weaknesses centered on input handling and access control. The recurring vulnerability classes—SQL injection, cross-site scripting, sensitive information exposure, and improper authentication—reflect typical risks in server-side web platforms where request parsing and privilege boundaries are critical. Current severity, exploitation activity, and exposure figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Max Kervin over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-2328HIGH admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary accounts and conduct SQL inj | Jul 5, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-2326HIGH Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) an enter_parol cookie to index.php in an a | Jul 5, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-2329MEDIUM KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin/head.php, or (2) voting_diagram.php, (3) voting.php, (4) to | Jul 5, 2009 | 5.0 | 23 | NO | YES |
Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the v_vari | Jul 5, 2009 | 3.5 | 21 | NO | YES |
CVE-2007-6727HIGH SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter. | Jul 5, 2009 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Max Kervin.
Media articles that mention a CVE ID that affects a product developed by Max Kervin — matched by CVE ID, not by vendor name.