CVE-2022-31295

CVE-2022-31295 affects Online Discussion Forum Site 1.0, with the delete_post() function in Maset.php:133 allowing unauthenticated attackers to arbitrarily delete posts. Multiple connected sources confirm the issue and describe it as a failure in delete_post(), enabling post deletion without auth...

CVE-2022-31295

An issue in the deletepost function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts...

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

Design/Logic Flaw

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

CVE-2022-31294

The CVE-2022-31294 issue affects Online Discussion Forum Site 1.0 (Sourcecodester). A flaw in the save_users() function allows unauthenticated attackers to arbitrarily create or update user accounts, enabling potential account takeover. Documents confirm the vulnerability path and mention an expl...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

Sql injection

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

Cross site scripting

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

CVE-2022-31913

CVE-2022-31913 affects Online Discussion Forum Site v1.0. It is a Cross Site Scripting (XSS) vulnerability exploitable via /odfs/classes/Master.php?f=save_category with the name parameter, arising from missing data filtering and escaping. Reported impact aligns with XSS in user input handling; CV...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31911

CVE-2022-31911 affects Online Discussion Forum Site v1.0. The root cause is a SQL injection in the Master.php endpoint f=delete_team due to missing input filtering/escaping. Multiple sources (CNVD, NVD, Red Hat, CNNVD, CVE listings) corroborate the affected endpoint and vulnerability class; explo...

PT-2022-20987 · Unknown · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site version 1.0 Description: The issue is related to Cross Site Scripting XSS via the "/odfs/classes/Master.php?f=save category" API endpoint, specifically affecting the name variable. This allows for potential...

PT-2022-20671 · Online Discussion Forum Site +1 · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site 1 affected versions not specified Description: An issue in the delete post function allows unauthenticated attackers to arbitrarily delete posts. Recommendations: At the moment, there is no information about a new...