Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:online_discussion_forum:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductOnline Discussion Forum (d5d50ecd-6f61-5b47-b778-26fe720ac60a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10800 vulnerable 2026-06-08 07:02:27.538121 itsourcecode Online Discussion Forum index.php sql injection
HIGH (7.3)
A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-09-22T13:32:09.387Z
Updated: 2025-09-22T13:58:56.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10668 vulnerable 2026-06-08 07:02:27.294536 itsourcecode Online Discussion Forum compose_msg_admin.php sql injection
HIGH (7.3)
A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2025-09-18T13:32:07.040Z
Updated: 2025-09-18T13:41:36.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10667 vulnerable 2026-06-08 07:02:27.293948 itsourcecode Online Discussion Forum compose_msg.php sql injection
HIGH (7.3)
A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/compose_msg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-09-18T13:02:10.036Z
Updated: 2025-09-18T13:19:11.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10068 vulnerable 2026-06-08 07:02:26.241178 itsourcecode Online Discussion Forum add_views.php sql injection
HIGH (7.3)
A flaw has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/admin_forum/add_views.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2025-09-07T04:32:06.674Z
Updated: 2025-09-08T17:38:16.892Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10033 vulnerable 2026-06-08 07:02:26.187180 itsourcecode Online Discussion Forum admin sql injection
HIGH (7.3)
A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Published: 2025-09-06T13:02:05.466Z
Updated: 2025-09-08T14:44:25.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5734 vulnerable 2026-06-08 06:56:17.136403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5733 vulnerable 2026-06-08 06:56:17.134332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5518 vulnerable 2026-06-08 06:56:16.233701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.