CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

Cross site scripting

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

Sql injection

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31913

CVE-2022-31913 affects Online Discussion Forum Site v1.0. It is a Cross Site Scripting (XSS) vulnerability exploitable via /odfs/classes/Master.php?f=save_category with the name parameter, arising from missing data filtering and escaping. Reported impact aligns with XSS in user input handling; CV...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

CVE-2022-31911

CVE-2022-31911 affects Online Discussion Forum Site v1.0. The root cause is a SQL injection in the Master.php endpoint f=delete_team due to missing input filtering/escaping. Multiple sources (CNVD, NVD, Red Hat, CNNVD, CVE listings) corroborate the affected endpoint and vulnerability class; explo...

PT-2022-20987 · Unknown · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site version 1.0 Description: The issue is related to Cross Site Scripting XSS via the "/odfs/classes/Master.php?f=save category" API endpoint, specifically affecting the name variable. This allows for potential...

PT-2022-20670 · Online Discussion Forum Site +1 · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site 1 affected versions not specified Description: The issue allows unauthenticated attackers to arbitrarily create or update user accounts due to a problem in the save users function. Recommendations: At the moment,...

Online Discussion Forum Site SQL注入漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester, an online discussion forum. A SQL injection vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=deleteteam missing filter escaping for SQL data. ...

PT-2022-20985 · Unknown · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/odfs/classes/Master.php?f=delete team" API endpoint. This allows for potential unauthorized access and manipulation of database...

Sourcecodester Online Discussion Forum Site 跨站请求伪造漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A security vulnerability in Sourcecodester Online Discussion Forum Site version 1.0, which stems from an issue in the saveusers function, allows an unauthenticated attacker to arbitrarily...

PT-2022-20671 · Online Discussion Forum Site +1 · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site 1 affected versions not specified Description: An issue in the delete post function allows unauthenticated attackers to arbitrarily delete posts. Recommendations: At the moment, there is no information about a new...

Sourcecodester Online Discussion Forum Site 跨站脚本漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A cross-site scripting vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=savecategory, name missing data filtering...

JForum 跨站请求伪造漏洞

JForum is Jforum team of a set of Java language development , Web-based open source forum system . JForum v2.8.0 version of a security vulnerability , the vulnerability stems from /jforum.page found to exist cross-site request forgery vulnerability . Attackers use this vulnerability to arbitraril...

FUDForum Remote Code Execution Vulnerability

FUDForum is a PHP-based open source forum software.FUDForum versions prior to 3.1.2 are vulnerable to remote code execution. An attacker can use this vulnerability to execute remote code with the help of the upload file function of the file management system in the administration control panel...