CVE-2024-5733 itsourcecode Online Discussion Forum register_me.php sql injection

A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been rated as critical. This issue affects some unknown processing of the file registerme.php. The manipulation of the argument eaddress leads to sql injection. The attack may be initiated remotely. The exploit has been...

WordPress Discussion Board plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-37109

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Discussion Forum version 1.0 Description: A critical issue affects the processing of the file register me.php. The manipulation of the eaddress argument leads to sql injection. The attack may be initiated remotely...

CVE-2024-5733: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been rated as critical. This issue affects some unknown processing of the file registerme.php. The manipulation of the argument eaddress leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-5734: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. Affected is an unknown function of the file /members/poster.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has be...

Online Discussion Forum SQL Injection Vulnerability

Online Discussion Forum is a forum website. A SQL injection vulnerability exists in Online Discussion Forum version 1.0, which originates from registerme.php containing some unknown processing that leads to SQL injection via the parameter eaddress...

Online Discussion Forum Code Issues Vulnerabilities

Online Discussion Forum is a forum website. A code issue exists in version 1.0 of Online Discussion Forum, which originates from /members/poster.php containing an unknown function that causes unrestricted uploads via the parameter image...

PT-2024-37110

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Discussion Forum version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /members/poster.php. The manipulation of the image argument leads to unrestricted upload...

CVE-2024-2360

parisneo/lollms-webui is vulnerable to path traversal attacks that can lead to remote code execution due to insufficient sanitization of user-supplied input in the 'Database path' and 'PDF LaTeX path' settings. An attacker can exploit this vulnerability by manipulating these settings to execute...

CVE-2023-39161

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Discussion Board Discussion Board allows Content Spoofing, Cross-Site Scripting XSS.This issue affects Discussion Board: from n/a through 2.4.8...

CVE-2023-39161 WordPress Discussion Board plugin <= 2.4.8 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Discussion Board Discussion Board allows Content Spoofing, Cross-Site Scripting XSS.This issue affects Discussion Board: from n/a through 2.4.8...

PT-2024-12774

Name of the Vulnerable Software and Affected Versions WP Discussion Board versions through 2.4.8 Description The issue affects WP Discussion Board, allowing Content Spoofing and Cross-Site Scripting XSS due to improper neutralization of script-related HTML tags in a web page. This can lead to bas...

CVE-2023-39161: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Discussion Board Discussion Board allows Content Spoofing, Cross-Site Scripting XSS.This issue affects Discussion Board: from n/a through 2.4.8...

WordPress plugin Discussion Board 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-5518

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file changeprofilepicture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

CVE-2024-5518 itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file changeprofilepicture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

Online Discussion Forum SQL注入漏洞

Online Discussion Forum is a forum website. Itsourcecode Online Discussion Forum version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter useremail in the file login.php that can lead to SQL injection...

CVE-2024-5518: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file changeprofilepicture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

CVE-2024-4920

SourceCodester Online Discussion Forum Site 1.0 is affected by a vulnerability in the registerH.php file. The issue stems from manipulation of the ima parameter, which leads to an unrestricted file upload. Impact is described as potentially remote and publicly disclosed. The vulnerability is docu...

CVE-2024-4920 SourceCodester Online Discussion Forum Site registerH.php unrestricted upload

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file registerH.php. The manipulation of the argument ima leads to unrestricted upload. The attack may be initiated remotely. The exploit h...