Approved changes feed: RSS · Atom

cpe:2.3:a:oretnom23:simple_forum\/discussion_system:1.0:*:*:*:*:wordpress:*:*

part: a version: 1.0 update: *

VendorOretnom23 (bb7583fb-f029-599f-a8a3-33d64769aa1f)
ProductSimple Forum/Discussion System (7e7907c1-0da5-5581-9306-fa3f3f219744)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10100 vulnerable 2026-06-03 14:58:33.547600 SourceCodester Simple Forum Discussion System admin_class.php sql injection
HIGH (7.3)
A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /admin_class.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2025-09-08T18:02:09.311Z
Updated: 2025-09-08T18:54:33.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9032 vulnerable 2026-06-03 14:58:20.346236 SourceCodester Simple Forum-Discussion System index.php path traversal
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-20T13:00:12.813Z
Updated: 2024-09-20T13:11:15.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45252 vulnerable 2026-06-03 14:45:37.922394 Details available
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are manage_topic.php, manage_user.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability.
Published: 2021-12-21T11:04:26.000Z
Updated: 2024-08-04T04:39:20.338Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.