CVE-2026-25923

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file disguised as JPEG via the image...

MyBB Directory Traversal Vulnerability

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A directory traversal vulnerability exists in the backend of MyBB versions prior to 1.8.11, which can be exploited by a remote attacker to submit a special directory traversal request to read arbitrary files...

VUBB Forum SQL and XSS vuln.

VUBB Forum SQL and XSS vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html Vendor:http://www.vubb.com/ affected version: alpha rc1 Product description: Free PHP/MySQL forum/bulletin board system. The only...