CVE-2024-5518

The CVE-2024-5518 entry concerns itsourcecode Online Discussion Forum 1.0. The vulnerability lies in the file change_profile_picture.php where the image parameter can be manipulated to achieve unrestricted uploads. It can be triggered remotely, and public exploitation has been disclosed (VDB-2665...

CVE-2024-52676

The CVE-2024-52676 entry documents a Cross Site Scripting (XSS) vulnerability in itsourcecode Online Discussion Forum Project v1.0.0, exploitable via /bcc_forum/members/home.php. Affected component: the forum’s home page handling user input. Root cause per the sources is an XSS flaw enabling inje...

CVE-2024-37868

CVE-2024-37868 involves the Itsourcecode Online Discussion Forum Project v1.0 with a vulnerability in the sendreply.php file that accepts uploaded files via the $_FILES variable, enabling remote code execution. The issue is described with a high impact (C/H/I/A) and CVSS v3.1 score 8.8. Exploitat...

CVE-2024-37869

The CVE-2024-37869 entry describes a file upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0. A remote attacker can trigger arbitrary code execution via the poster.php handler, with the uploaded payload received through the $_FILES variable. The available references indica...

CVE-2025-10033

CVE-2025-10033 affects itsourcecode Online Discussion Forum 1.0. The vulnerability is a SQL injection in the /admin file caused by manipulation of the Username parameter, exploitable remotely, with public disclosure. Multiple sources confirm the issue and provide varying CVSS perspectives; the NV...