Lucene search
+L

7167 matches found

NVD
NVD
added 2025/09/22 9:15 a.m.12 views

CVE-2025-10790

A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=savecategory. The manipulation of the argument Description results in sql injection. The attack can be executed remotely. The exploit has been...

8.8CVSS0.00335EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/22 8:32 a.m.3 views

CVE-2025-10790 SourceCodester Simple Forum Discussion System ajax.php sql injection

A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=savecategory. The manipulation of the argument Description results in sql injection. The attack can be executed remotely. The exploit has been...

6.5CVSS6.7AI score0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/22 8:32 a.m.24 views

CVE-2025-10790 SourceCodester Simple Forum Discussion System ajax.php sql injection

A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=savecategory. The manipulation of the argument Description results in sql injection. The attack can be executed remotely. The exploit has been...

6.5CVSS0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/22 8:32 a.m.22 views

CVE-2025-10790

SourceCodester Simple Forum Discussion System 1.0 is affected by CVE-2025-10790. The vulnerability resides in /ajax.php?action=save_category, where manipulating the Description parameter leads to SQL injection. Exploitation can be carried out remotely, and multiple connected sources confirm the e...

8.8CVSS6.4AI score0.00335EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.12 views

PT-2025-38718

Name of the Vulnerable Software and Affected Versions itsourcecode Online Discussion Forum version 1.0 Description A flaw exists in itsourcecode Online Discussion Forum that could allow for remote code execution. The issue is related to a SQL injection impacting an unknown function within the...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.12 views

SourceCodester Simple Forum Discussion System 安全漏洞

SourceCodester Simple Forum Discussion System is an open source forum system from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester Simple Forum Discussion System, which stems from an incorrect manipulation of the parameter Description in file/ajax.php, which...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

itsourcecode Online Discussion Forum SQL注入漏洞

itsourcecode Online Discussion Forum is an online forum of itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Online Discussion Forum version 1.0, which stems from incorrect manipulation of the parameters email/password in the file /index.php, which could lead to a SQL...

9.8CVSS7.7AI score0.00478EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.10 views

PT-2025-38700

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Forum Discussion System version 1.0 Description A security flaw exists in SourceCodester Simple Forum Discussion System version 1.0. The issue involves SQL injection, which can be triggered by manipulating the Description...

8.8CVSS6.4AI score0.00335EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/09/20 1:37 p.m.22 views

CVE-2025-10668

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

9.8CVSS6.9AI score0.00435EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/20 1:37 p.m.17 views

CVE-2025-10667

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/composemsg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS7AI score0.00525EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/20 1:57 a.m.20 views

CVE-2025-10642

A vulnerability has been found in wangchenyi1996 chatforum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts an unknown function of the file /q.php. Such manipulation of the argument path leads to cross site scripting. The attack may be launched remotely. This product operates on a...

5.1CVSS3.6AI score0.00268EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/09/19 12:00 a.m.13 views

Online Discussion Forum search_result.php File SQL Injection Vulnerability

Online Discussion Forum is an online forum. Online Discussion Forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /admin/adminforum/searchresult.php. An attacker can exploit this...

9.8CVSS7.9AI score0.00417EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/19 12:00 a.m.9 views

Online Discussion Forum edit_member.php File SQL Injection Vulnerability

Online Discussion Forum is an online forum. Online Discussion Forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /admin/editmember.php. An attacker can exploit this vulnerability to...

9.8CVSS7.9AI score0.00417EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/18 2:15 p.m.8 views

CVE-2025-10668

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

9.8CVSS5.7AI score0.00435EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/18 1:32 p.m.23 views

CVE-2025-10668

The CVE concerns itsourcecode Online Discussion Forum 1.0, where manipulation of the ID parameter in /members/compose_msg_admin.php enables SQL injection. This is a network-accessible issue with potential remote exploitation, and multiple feeds (nvd, Red Hat, CVE records, and security trackers) c...

9.8CVSS7.2AI score0.00435EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/18 1:32 p.m.19 views

CVE-2025-10668 itsourcecode Online Discussion Forum compose_msg_admin.php sql injection

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

7.5CVSS0.00435EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/18 1:32 p.m.4 views

CVE-2025-10668 itsourcecode Online Discussion Forum compose_msg_admin.php sql injection

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

7.5CVSS7.2AI score0.00435EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/18 1:15 p.m.9 views

CVE-2025-10667

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/composemsg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.7AI score0.00525EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/18 1:02 p.m.5 views

CVE-2025-10667 itsourcecode Online Discussion Forum compose_msg.php sql injection

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/composemsg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS7.3AI score0.00525EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/18 1:02 p.m.23 views

CVE-2025-10667

CVE-2025-10667 affects the itsourcecode Online Discussion Forum 1.0. The vulnerability is a SQL injection in the file /members/compose_msg.php caused by manipulation of the ID parameter, enabling remote exploitation. Multiple sources confirm the issue and publicly available exploit code may exist...

9.8CVSS7.3AI score0.00525EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder