Vulnerabilities

TI-2024-05328 CVE-2024-5734 · GHSA-vfhg-qvc9-3fr9

itsourcecode Online Discussion Forum poster.php unrestricted upload

LOW 25

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00618 Published 2024-06-07 No fix listed CWE-434

TI-2024-05327 CVE-2024-5733 · GHSA-rf2w-v629-wf4f

LOW 33

A vulnerability was found in itsourcecode Online Discussion Forum 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00622 Published 2024-06-07 No fix listed CWE-89

TI-2022-13312 CVE-2022-31296 · GHSA-9p9p-64q6-hgqm

MEDIUM 47

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02432 Published 2022-06-17 No fix listed CWE-89

TI-2020-17110 CVE-2020-28141 · GHSA-r9fr-9cp6-7c2h

LOW 25

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00604 Published 2021-04-19 No fix listed CWE-79