28 matches found
CVE-2022-31296
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
CVE-2024-2690
A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been classified as critical. Affected is an unknown function of the file /uupdate.php. The manipulation of the argument ima leads to unrestricted upload. It is possible to launch the attack remotely. The exploit...
SUSE SLES15 / openSUSE 15 Security Update : openvswitch3 (SUSE-SU-2023:3710-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3710-1 advisory. - A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This...
CVE-2023-3152
A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\viewpost.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
CVE-2023-3152 SourceCodester Online Discussion Forum Site view_post.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\viewpost.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
Sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\categories\managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...
CVE-2023-3146 SourceCodester Online Discussion Forum Site manage_category.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\categories\managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...
CVE-2023-3144
A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\posts\managepost.php. The manipulation of the argument title leads to cross site scripting. The attack can be launch...
CVE-2023-3145
A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0. Affected by this issue is some unknown functionality of the file classes\Users.php?f=registration. The manipulation of the argument username leads to sql injection. The attack may...
CVE-2023-3144
A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\posts\managepost.php. The manipulation of the argument title leads to cross site scripting. The attack can be launch...
Cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Online Discussion Forum Site 1.0. Affected is an unknown function of the file admin\posts\managepost.php. The manipulation of the argument content leads to cross site scripting. It is possible to launch the attack remotely...
CVE-2023-3145
CVE-2023-3145 affects SourceCodester Online Discussion Forum Site 1.0. Affected component: the file classes\Users.php?f=registration; the vulnerability arises from manipulating the username parameter, enabling SQL injection. Exploitation is described as remotely possible and the exploit has been ...
SourceCodester Online Discussion Forum Site 跨站脚本漏洞
SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An Online Discussion Forum. A cross-site scripting vulnerability exists in Online Discussion Forum Site version 1.0, which stems from cross-site scripting due to incorrect manipulation of the parameter content...
Online Discussion Forum Site SQL注入漏洞( CNVD-2022-58959 )
Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum, Online Discussion Forum Site is vulnerable to a SQL injection vulnerability in /odfs/posts/viewpost.php that lacks validation of externally entered SQL statements. An attacker could use this vulnerabilit...
CVE-2022-31296
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
CVE-2022-31295
An issue in the deletepost function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts...
CVE-2022-31294
An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...
CVE-2022-31294
An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...
CVE-2022-31913
Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...
CVE-2022-31913
CVE-2022-31913 affects Online Discussion Forum Site v1.0. It is a Cross Site Scripting (XSS) vulnerability exploitable via /odfs/classes/Master.php?f=save_category with the name parameter, arising from missing data filtering and escaping. Reported impact aligns with XSS in user input handling; CV...