GCVE - cpe:2.3:a:fabian:simple_forum:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fabian:simple_forum:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Fabian (`fbf7922e-b691-5c28-8717-83ed5e15ae54`)
Product	Simple Forum (`4e8abd0c-d77d-5bdf-8cf0-c99e4716eb98`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-6866`	vulnerable	2026-06-08 07:43:16.570746	code-projects Simple Forum forum_downloadfile.php path traversal MEDIUM (4.3) A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T18:02:05.555Z Updated: 2025-06-30T15:34:48.737Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314338 https://vuldb.com/?ctiid.314338 https://vuldb.com/?submit.603581 https://github.com/ez-lbz/poc/issues/22 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6850`	vulnerable	2026-06-08 07:43:16.549922	code-projects Simple Forum forum1.php sql injection MEDIUM (6.3) A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T07:00:17.210Z Updated: 2025-06-30T15:46:46.563Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314293 https://vuldb.com/?ctiid.314293 https://vuldb.com/?submit.603352 https://github.com/ez-lbz/poc/issues/20 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6849`	vulnerable	2026-06-08 07:43:16.549404	code-projects Simple Forum forum_edit1.php cross site scripting LOW (3.5) A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forum_edit1.php. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T06:31:05.779Z Updated: 2025-06-30T15:47:37.641Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314292 https://vuldb.com/?ctiid.314292 https://vuldb.com/?submit.603351 https://github.com/ez-lbz/poc/issues/19 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6848`	vulnerable	2026-06-08 07:43:16.548889	code-projects Simple Forum forum1.php unrestricted upload MEDIUM (6.3) A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects some unknown processing of the file /forum1.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T06:00:19.519Z Updated: 2025-06-30T15:48:43.156Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314291 https://vuldb.com/?ctiid.314291 https://vuldb.com/?submit.603349 https://github.com/ez-lbz/poc/issues/18 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6847`	vulnerable	2026-06-08 07:43:16.548420	code-projects Simple Forum forum_edit.php sql injection MEDIUM (6.3) A vulnerability classified as critical was found in code-projects Simple Forum 1.0. This vulnerability affects unknown code of the file /forum_edit.php. The manipulation of the argument iii leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T05:31:05.154Z Updated: 2025-06-30T15:49:48.933Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314290 https://vuldb.com/?ctiid.314290 https://vuldb.com/?submit.603347 https://github.com/ez-lbz/poc/issues/17 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6846`	vulnerable	2026-06-08 07:43:16.548019	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6845`	vulnerable	2026-06-08 07:43:16.547493	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6844`	vulnerable	2026-06-08 07:43:16.546820	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.