GCVE - cpe:2.3:a:code-projects:simple_forum:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_forum:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Code Projects (`a64d3912-7513-5560-97cf-6216c4da48a5`)
Product	Simple Forum (`e15c8cbb-0f8c-5e4f-a317-af291df0e9ad`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-6866`	vulnerable	2026-06-08 07:43:16.570597	code-projects Simple Forum forum_downloadfile.php path traversal MEDIUM (4.3) A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T18:02:05.555Z Updated: 2025-06-30T15:34:48.737Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314338 https://vuldb.com/?ctiid.314338 https://vuldb.com/?submit.603581 https://github.com/ez-lbz/poc/issues/22 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6850`	vulnerable	2026-06-08 07:43:16.549758	code-projects Simple Forum forum1.php sql injection MEDIUM (6.3) A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T07:00:17.210Z Updated: 2025-06-30T15:46:46.563Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314293 https://vuldb.com/?ctiid.314293 https://vuldb.com/?submit.603352 https://github.com/ez-lbz/poc/issues/20 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6849`	vulnerable	2026-06-08 07:43:16.549247	code-projects Simple Forum forum_edit1.php cross site scripting LOW (3.5) A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forum_edit1.php. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T06:31:05.779Z Updated: 2025-06-30T15:47:37.641Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314292 https://vuldb.com/?ctiid.314292 https://vuldb.com/?submit.603351 https://github.com/ez-lbz/poc/issues/19 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6848`	vulnerable	2026-06-08 07:43:16.548771	code-projects Simple Forum forum1.php unrestricted upload MEDIUM (6.3) A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects some unknown processing of the file /forum1.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T06:00:19.519Z Updated: 2025-06-30T15:48:43.156Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314291 https://vuldb.com/?ctiid.314291 https://vuldb.com/?submit.603349 https://github.com/ez-lbz/poc/issues/18 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6847`	vulnerable	2026-06-08 07:43:16.548386	code-projects Simple Forum forum_edit.php sql injection MEDIUM (6.3) A vulnerability classified as critical was found in code-projects Simple Forum 1.0. This vulnerability affects unknown code of the file /forum_edit.php. The manipulation of the argument iii leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-29T05:31:05.154Z Updated: 2025-06-30T15:49:48.933Z Open on db.gcve.eu Reference links https://vuldb.com/?id.314290 https://vuldb.com/?ctiid.314290 https://vuldb.com/?submit.603347 https://github.com/ez-lbz/poc/issues/17 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6846`	vulnerable	2026-06-08 07:43:16.547872	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6845`	vulnerable	2026-06-08 07:43:16.547318	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6844`	vulnerable	2026-06-08 07:43:16.529813	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.