CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-5734 – itsourcecode Online Discussion Forum poster.php unrestricted upload
https://notcve.org/view.php?id=CVE-2024-5734
A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. Affected is an unknown function of the file /members/poster.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/kingshao0312/cve/issues/2 https://vuldb.com/?ctiid.267408 https://vuldb.com/?id.267408 https://vuldb.com/?submit.351116 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-5733 – itsourcecode Online Discussion Forum register_me.php sql injection
https://notcve.org/view.php?id=CVE-2024-5733
A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been rated as critical. This issue affects some unknown processing of the file register_me.php. The manipulation of the argument eaddress leads to sql injection. The attack may be initiated remotely. • https://github.com/kingshao0312/cve/issues/1 https://vuldb.com/?ctiid.267407 https://vuldb.com/?id.267407 https://vuldb.com/?submit.351115 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-5518 – itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload
https://notcve.org/view.php?id=CVE-2024-5518
A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file change_profile_picture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/L1OudFd8cl09/CVE/issues/1 https://vuldb.com/?ctiid.266589 https://vuldb.com/?id.266589 https://vuldb.com/?submit.346309 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3152 – SourceCodester Online Discussion Forum Site view_post.php sql injection
https://notcve.org/view.php?id=CVE-2023-3152
A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#5sql-injection-vulnerability-in-adminpostsview_postphp https://vuldb.com/?ctiid.231021 https://vuldb.com/?id.231021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3151 – SourceCodester Online Discussion Forum Site manage_user.php sql injection
https://notcve.org/view.php?id=CVE-2023-3151
A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file user\manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. • https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md https://vuldb.com/?ctiid.231020 https://vuldb.com/?id.231020 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •