1275 matches found
CVE-2022-35220: Allocation of Resources Without Limits or Throttling
Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much memory, leading to abnormal terminati...
Design/Logic Flaw
fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...
CVE-2022-31184 Email activation route can be abused by spammers in Discourse
Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to send mass spam emails. A fix has been included in the latest stable, beta and tests-passed versions of Discourse which rate limits emails. Users are advised to upgrade. Users unabl...
CVE-2022-31184
CVE-2022-31184 affects Discourse; an abuse of the email activation route allows mass-spam via unmitigated email flows. The root cause is not deeply detailed in the provided documents, but the mitigation is explicit: a fix has been included in the latest stable, beta, and tests-passed Discourse re...
CVE-2022-31182
CVE-2022-31182 affects Discourse. A maliciously crafted request for static assets can cause error responses to be cached by Discourse’s default NGINX proxy configuration (cache poisoning). Root cause: incorrect/unsafe caching behavior in the proxy setup when handling static asset requests. Affect...
CVE-2022-35921: Improper Privilege Management
fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...
CVE-2022-35220
Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much memory, leading to abnormal terminati...
CVE-2022-31096
Discourse (open source discussion platform) has a vulnerability where a logged-in user can redeem an invite with an email that doesn’t match the invite or violates the invite’s email domain restriction, potentially leading to viewing content restricted to certain groups. The issue is worsened whe...
Online Discussion Forum Site SQL注入漏洞（ CNVD-2022-58959 ）
Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum, Online Discussion Forum Site is vulnerable to a SQL injection vulnerability in /odfs/posts/viewpost.php that lacks validation of externally entered SQL statements. An attacker could use this vulnerabilit...
Online Discussion Forum Site SQL注入漏洞（CNVD-2022-58961 ）
Sourcecodester Online Discussion Forum Site is an application of Sourcecodester, an online discussion forum. A SQL injection vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=deleteteam missing filter escaping for SQL data. ...
CVE-2022-31296
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
CVE-2022-31296
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
CVE-2022-31296
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
Sql injection
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
CVE-2022-31296
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
CVE-2022-31296
CVE-2022-31296 affects the Sourcecodester-based Online Discussion Forum Site 1. The vulnerability is a blind SQL injection in the /odfs/posts/view_post.php component (parameter: id). Root cause: lack of input validation allows unauthenticated attackers to manipulate SQL queries, enabling data ext...
CVE-2022-31296: Improper Neutralization of Special Elements used in an SQL Command
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
PT-2022-20672
Name of the Vulnerable Software and Affected Versions Online Discussion Forum Site 1 affected versions not specified Description The issue is related to a blind SQL injection vulnerability. This vulnerability is located in the component /odfs/posts/view post.php. Recommendations At the moment,...