Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_it_discussion_forum:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple It Discussion Forum (129b7d8d-e9cd-556e-a9b2-b6173638e9da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6031 vulnerable 2026-06-08 08:07:04.399459 code-projects Simple IT Discussion Forum add-category-function.php sql injection
HIGH (7.3)
A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. This affects an unknown function of the file /add-category-function.php. Such manipulation of the argument Category leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-04-10T07:00:25.770Z
Updated: 2026-04-10T11:48:27.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6004 vulnerable 2026-06-08 08:07:04.360529 code-projects Simple IT Discussion Forum delete-category.php sql injection
HIGH (7.3)
A vulnerability was detected in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /delete-category.php. Performing a manipulation of the argument cat_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-04-10T02:30:23.693Z
Updated: 2026-04-10T13:44:55.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6003 vulnerable 2026-06-08 08:07:04.360093 code-projects Simple IT Discussion Forum user.php cross site scripting
LOW (2.4)
A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /admin/user.php. Such manipulation of the argument fname leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2026-04-10T02:15:14.177Z
Updated: 2026-04-14T03:17:51.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5985 vulnerable 2026-06-08 08:07:04.337048 code-projects Simple IT Discussion Forum crud.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /crud.php. The manipulation of the argument user_Id results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-09T22:15:14.337Z
Updated: 2026-04-10T14:09:30.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5961 vulnerable 2026-06-08 08:07:04.306497 code-projects Simple IT Discussion Forum topic-details.php sql injection
HIGH (7.3)
A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This vulnerability affects unknown code of the file /topic-details.php. The manipulation of the argument post_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-04-09T16:15:13.362Z
Updated: 2026-04-09T19:37:15.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5829 vulnerable 2026-06-08 08:07:04.138301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5828 vulnerable 2026-06-08 08:07:04.138018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5827 vulnerable 2026-06-08 08:07:04.137630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5826 vulnerable 2026-06-08 08:07:04.137354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5672 vulnerable 2026-06-08 08:07:03.966812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.