CVE-2024-52676

The Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross-Site Scripting (XSS) via the /bcc_forum/members/home.php endpoint. This vulnerability, identified as CWE-79 , allows for the potential injection of malicious scripts. As of the current documentation, no newer version ...

CVE-2024-5518

The CVE-2024-5518 entry concerns itsourcecode Online Discussion Forum 1.0. The vulnerability lies in the file change_profile_picture.php where the image parameter can be manipulated to achieve unrestricted uploads. It can be triggered remotely, and public exploitation has been disclosed (VDB-2665...

CVE-2024-37868

CVE-2024-37868 involves the Itsourcecode Online Discussion Forum Project v1.0 with a vulnerability in the sendreply.php file that accepts uploaded files via the $_FILES variable, enabling remote code execution. The issue is described with a high impact (C/H/I/A) and CVSS v3.1 score 8.8. Exploitat...

CVE-2024-37869

The CVE-2024-37869 entry describes a file upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0. A remote attacker can trigger arbitrary code execution via the poster.php handler, with the uploaded payload received through the $_FILES variable. The available references indica...

CVE-2025-10033

CVE-2025-10033 affects itsourcecode Online Discussion Forum 1.0. The vulnerability is a SQL injection in the /admin file caused by manipulation of the Username parameter, exploitable remotely, with public disclosure. Multiple sources confirm the issue and provide varying CVSS perspectives; the NV...