Online Discussion Forum Site SQL注入漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester, an online discussion forum. A SQL injection vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=deleteteam missing filter escaping for SQL data. ...

CVE-2022-31295: Authorization Bypass Through User-Controlled Key

An issue in the deletepost function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts...

CVE-2022-31294: Cross-Site Request Forgery (CSRF)

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

PT-2022-20670 · Online Discussion Forum Site +1 · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site 1 affected versions not specified Description: The issue allows unauthenticated attackers to arbitrarily create or update user accounts due to a problem in the save users function. Recommendations: At the moment,...

Sourcecodester Online Discussion Forum Site 跨站请求伪造漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A security vulnerability in Sourcecodester Online Discussion Forum Site version 1.0, which stems from an issue in the saveusers function, allows an unauthenticated attacker to arbitrarily...

PT-2022-20985 · Unknown · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/odfs/classes/Master.php?f=delete team" API endpoint. This allows for potential unauthorized access and manipulation of database...

CVE-2022-31913: Improper Neutralization of Input During Web Page Generation

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

PT-2022-20671 · Online Discussion Forum Site +1 · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site 1 affected versions not specified Description: An issue in the delete post function allows unauthenticated attackers to arbitrarily delete posts. Recommendations: At the moment, there is no information about a new...

Sourcecodester Online Discussion Forum Site 跨站脚本漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A cross-site scripting vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=savecategory, name missing data filtering...

JForum 跨站请求伪造漏洞

JForum is Jforum team of a set of Java language development , Web-based open source forum system . JForum v2.8.0 version of a security vulnerability , the vulnerability stems from /jforum.page found to exist cross-site request forgery vulnerability . Attackers use this vulnerability to arbitraril...

CVE-2022-31911: Improper Neutralization of Special Elements used in an SQL Command

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

FUDForum Cross-Site Scripting Vulnerability (CNVD-2022-70051)

FUDForum is a PHP-based forum software. version 3.1.2 of FUDForum contains a cross-site scripting vulnerability. An attacker can exploit this vulnerability to perform cross-site scripting attacks with the help of the forum name field in the forum manager function...

FUDForum Remote Code Execution Vulnerability

FUDForum is a PHP-based open source forum software.FUDForum versions prior to 3.1.2 are vulnerable to remote code execution. An attacker can use this vulnerability to execute remote code with the help of the upload file function of the file management system in the administration control panel...

CVE-2022-30861

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...

CVE-2022-30861

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...

Design/Logic Flaw

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...

CVE-2022-30861

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...

CVE-2022-30861

CVE-2022-30861 affects FUDforum 3.1.2. The vulnerability is a Stored XSS in the Forum Name field of the Forum Manager feature. Documents consistently describe the flaw as a cross-site scripting vulnerability in FUDforum 3.1.2; no further technical details (such as specific payloads, exact vulnera...

CVE-2022-30861

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...

FUDforum 跨站脚本漏洞

FUDForum is a PHP-based forum software. version 3.1.2 of FUDForum contains a cross-site scripting vulnerability. An attacker can exploit this vulnerability to perform cross-site scripting attacks with the help of the forum name field in the forum manager function...