Mylittleforum
Approved changes feed: RSS · Atom
cpe:2.3:a:my-little-forum:mylittleforum:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | My Little Forum (ce013454-3d46-5c06-910b-8a3023b26b71) |
|---|---|
| Product | Mylittleforum (b7f87e61-4cfd-54ed-b42e-5c3265f6c370) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25923 |
vulnerable | 2026-06-08 07:53:20.608881 |
Phar Deserialization leading to Arbitrary File Deletion in my little forum
my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file (disguised as JPEG) via the image upload feature, trigger Phar deserialization through BBCode [img] tag processing, and exploit Smarty 4.1.0 POP chain to achieve arbitrary file deletion. This vulnerability is fixed in 20260208.1.
Published: 2026-02-09T21:56:02.862Z
Updated: 2026-02-11T21:20:25.222Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62606 |
vulnerable | 2026-06-08 07:39:16.196147 |
my little forum vulnerable to SQL Injection in Bookmark Reordering via bookmarks parameter
HIGH (8.8)
my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a full compromise of the application's database, including reading, modifying, or deleting all data. This issue has been patched in version 2.5.12.
Published: 2025-10-22T15:11:16.114Z
Updated: 2025-10-22T17:21:38.838Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.