77 matches found
CVE-2026-25923: Unrestricted Upload of File with Dangerous Type
my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file disguised as JPEG via the image...
my little forum 代码问题漏洞
My Little Forum is an open-source online forum system based on PHP and MySQL. Versions prior to 20260208.1 had code vulnerabilities; these vulnerabilities stemmed from URL validation not filtering the phar protocol, which could lead to arbitrary file deletion...
CVE-2019-12253
my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=postingposting...
my little forum 安全漏洞
my little forum is an open source PHP and MySQL based online forum system by My Little Forum. A security vulnerability exists in versions prior to my little forum 2.5.12, which stems from a SQL injection in the bookmark reordering function and could lead to a complete database crack...
CVE-2025-62606: Improper Neutralization of Special Elements used in an SQL Command
my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a...
EUVD-2010-2149
Malware in sbrugna...
EUVD-2018-7443
Malware in sbrugna...
EUVD-2015-1610
Malware in sbrugna...
EUVD-2005-3045
Malware in sbrugna...
EUVD-2008-4850
Malware in sbrugna...
EUVD-2015-1570
Malware in sbrugna...
EUVD-2007-2098
Malware in sbrugna...
EUVD-2007-2934
Malware in sbrugna...
EUVD-2006-0478
Malware in sbrugna...
CVE-2019-12253
my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&deleteposting...
CVE-2019-12253
CVE-2019-12253 affects the project’s “my little forum” prior to version 2.4.20. The vulnerability is a CSRF flaw that allows deleting posts via a crafted request (e.g., mode=posting&delete_posting). The issue is confirmed across multiple feeds (NVD/NVD-derived entries, Red Hat advisory, OSV, CVE ...
CVE-2019-12253
my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&deleteposting...
CVE-2019-12253: Cross-Site Request Forgery (CSRF)
my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&deleteposting...
