CVE-2024-12484

CVE-2024-12484 affects Codezips Technical Discussion Forum 1.0, with a SQL injection in /signuppost.php caused by manipulating the Username parameter. The vulnerability is exploitable remotely and exploitation has been disclosed publicly. Affected code is described as unknown elsewhere in the doc...

CVE-2024-12788

Codezips Technical Discussion Forum 1.0 contains an SQL injection in signinpost.php via the username parameter. The vulnerability can be triggered remotely, with exploits disclosed publicly; root cause is manipulation of the username argument. No official patch/version is stated; a PT-Security re...