Mylittleforum

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Mylittleforum records in CISA KEV

No Mylittleforum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

My Little Forum 9 records HIGH

Records

9 records

TI-2026-20953 CVE-2026-25923

Phar Deserialization leading to Arbitrary File Deletion in my little forum

HIGH 77

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00493 Published 2026-02-09 Fixed in 20260208.1 CWE-434

TI-2010-02045 CVE-2010-2133 · GHSA-25mc-rjmh-r6x4

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to…

LOW 37

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0199 Published 2010-06-02 No fix listed CWE-89

TI-2015-01302 CVE-2015-1434 · GHSA-3rpm-wgqm-r264

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote…

LOW 33

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the (1) letter parameter in a user action or (2) edit_category parameter to index.p…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0185 Published 2015-02-16 No fix listed CWE-89

TI-2019-09141 CVE-2019-12253 · GHSA-p845-hff8-c6wf

my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.

LOW 30

my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00601 Published 2019-05-21 No fix listed CWE-352

TI-2018-11104 CVE-2018-15569 · GHSA-m5fr-j5m9-qp5q

my little forum 2.4.12 allows CSRF for deletion of users.

LOW 29

my little forum 2.4.12 allows CSRF for deletion of users.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00411 Published 2018-08-20 No fix listed CWE-352

TI-2015-01303 CVE-2015-1435 · GHSA-rc47-9w7h-6299

Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02421 Published 2015-02-16 No fix listed CWE-79

TI-2018-10744 CVE-2018-14937 · GHSA-53m7-6549-4h85

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.

LOW 24

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00907 Published 2018-08-05 No fix listed CWE-79

TI-2018-10743 CVE-2018-14936 · GHSA-pvc6-734p-r5m3

The Add page option in my little forum 2.4.12 allows XSS via the Title field.

LOW 24

The Add page option in my little forum 2.4.12 allows XSS via the Title field.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00907 Published 2018-08-05 No fix listed CWE-79

TI-2015-01336 CVE-2015-1475 · GHSA-8p28-vpwr-jhgr

Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01927 Published 2015-02-04 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	7
Low	0
No CVSS	0