CVE-2019-12253

my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&deleteposting...

Cross site scripting

The Add page option in my little forum 2.4.12 allows XSS via the Title field...

CVE-2015-1434

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

My Little Forum - 'contact.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : my little forum contact.php SQL Injection +Autor : Easy Laster +Date : 02.03.2010 +Script : my little forum contact.php +Download : http://mylittleforum.net/ +Demo : http://teklador.de/forum/ +Price :...

My Little Forum - contact.php SQL Injection

My Little Forum - contact.php SQL Injection ----------------------------Information------------------------------------------------ +Name : my little forum contact.php SQL Injection +Autor : Easy Laster +Date : 02.03.2010 +Script : my little forum contact.php +Download : http://mylittleforum.net/...