23 matches found
EUVD-2025-30786
Malicious code in bioql PyPI...
EUVD-2025-27150
Malicious code in bioql PyPI...
CVE-2025-10790: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=savecategory. The manipulation of the argument Description results in sql injection. The attack can be executed remotely. The exploit has been...
PT-2025-38700
Name of the Vulnerable Software and Affected Versions SourceCodester Simple Forum Discussion System version 1.0 Description A security flaw exists in SourceCodester Simple Forum Discussion System version 1.0. The issue involves SQL injection, which can be triggered by manipulating the Description...
CVE-2025-10100
A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...
CVE-2025-10100
A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...
CVE-2025-10100
CVE-2025-10100 affects SourceCodester Simple Forum Discussion System 1.0. The vulnerability is in the function handling the login endpoint, specifically the file path /admin_class.php?action=login, where manipulation of the Username parameter enables SQL injection. It is described as remotely exp...
CVE-2025-10100: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...
PT-2025-36490
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Forum Discussion System version 1.0 Description: A SQL injection issue exists in the file /admin class.php?action=login. Manipulation of the Username parameter can lead to exploitation. The attack can be initiated...
CVE-2024-9032
A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch the attack remotely. The exploit has...
CVE-2024-9032 SourceCodester Simple Forum-Discussion System index.php path traversal
A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch the attack remotely. The exploit has...
CVE-2024-9032
CVE-2024-9032 affects SourceCodester Simple Forum-Discussion System 1.0. A path traversal vulnerability exists in an unknown function of /index.php where manipulation of the page parameter enables remote exploitation. The vulnerability is described as critical across multiple sources, with public...
CVE-2024-9032: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch the attack remotely. The exploit has...
CVE-2024-44739
Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...
PT-2024-31231
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Forum Website version 1.0 Description The issue is a SQL injection vulnerability. It affects the /php-sqlite-forum/?page=manage user&id= endpoint, where the id parameter is vulnerable. This could potentially lead to data...
CVE-2024-44739
Sourcecodester Simple Forum Website v1.0 is vulnerable to a SQL injection flaw located in the /php-sqlite-forum/?page=manage_user&id= endpoint. This vulnerability arises from the improper neutralization of special elements used in an SQL command, potentially allowing an attacker to interfere with...
CVE-2024-44739
Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...
CVE-2024-44739: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...
CVE-2024-7929
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. It is possible to initiate...
CVE-2024-7929
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. It is possible to initiate...