Vulnerabilities

TI-2024-04576 CVE-2024-4920 · GHSA-q7q5-hvh8-gjh4

SourceCodester Online Discussion Forum Site registerH.php unrestricted upload

HIGH 70

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00829 Published 2024-05-16 No fix listed CWE-434

TI-2024-02505 CVE-2024-2690 · GHSA-9p5f-8c7x-7c7j

SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload

HIGH 75

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01046 Published 2024-03-20 No fix listed CWE-434

TI-2023-02954 CVE-2023-3152 · GHSA-hg4r-gx6g-m7fr

SourceCodester Online Discussion Forum Site view_post.php sql injection

HIGH 71

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00839 Published 2023-06-07 No fix listed CWE-89

TI-2023-02953 CVE-2023-3151 · GHSA-f4j6-v552-hrxp

SourceCodester Online Discussion Forum Site manage_user.php sql injection

LOW 39

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-06-07 No fix listed CWE-89

TI-2023-02952 CVE-2023-3150 · GHSA-7h94-7rrv-j8jq

SourceCodester Online Discussion Forum Site manage_post.php sql injection

LOW 39

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00751 Published 2023-06-07 No fix listed CWE-89

TI-2023-02951 CVE-2023-3149 · GHSA-3hgc-3p3q-4m9q

SourceCodester Online Discussion Forum Site manage_user.php sql injection

MEDIUM 40

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00838 Published 2023-06-07 No fix listed CWE-89

TI-2023-02950 CVE-2023-3148 · GHSA-mmv2-7ch7-7c5g

SourceCodester Online Discussion Forum Site manage_post.php sql injection

LOW 39

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-06-07 No fix listed CWE-89

TI-2023-02949 CVE-2023-3147 · GHSA-ccf8-hcrh-rjp9

SourceCodester Online Discussion Forum Site view_category.php sql injection

HIGH 71

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-06-07 No fix listed CWE-89

TI-2023-02948 CVE-2023-3146 · GHSA-wxfq-263r-9c3q

SourceCodester Online Discussion Forum Site manage_category.php sql injection

HIGH 71

A vulnerability, which was classified as critical, was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00751 Published 2023-06-07 No fix listed CWE-89

TI-2023-02947 CVE-2023-3145 · GHSA-rjv8-5r7g-7j9g

SourceCodester Online Discussion Forum Site sql injection

LOW 39

A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-06-07 No fix listed CWE-89

TI-2023-02946 CVE-2023-3144 · GHSA-4qrv-c52g-rjr6

SourceCodester Online Discussion Forum Site manage_post.php cross site scripting

LOW 25

A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00636 Published 2023-06-07 No fix listed CWE-79

TI-2023-02945 CVE-2023-3143 · GHSA-jw67-h578-772q

SourceCodester Online Discussion Forum Site manage_post.php cross site scripting

LOW 25

A vulnerability classified as problematic has been found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00612 Published 2023-06-07 No fix listed CWE-79

TI-2022-13311 CVE-2022-31295 · GHSA-j4gw-rr47-472j

An issue in the delete_post() function of Online Discussion Forum Site 1 allows…

LOW 36

An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01422 Published 2022-06-16 No fix listed CWE-639

TI-2022-13310 CVE-2022-31294 · GHSA-rc77-5c9x-xqgg

An issue in the save_users() function of Online Discussion Forum Site 1 allows…

LOW 30

An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00865 Published 2022-06-16 No fix listed CWE-352

TI-2022-13740 CVE-2022-31913 · GHSA-q4cm-862w-32h8

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via…

LOW 23

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0051 Published 2022-06-16 No fix listed CWE-79

TI-2022-13738 CVE-2022-31911 · GHSA-6v97-xhgj-94ff

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.

LOW 34

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-06-16 No fix listed CWE-89

Vulnerabilities

Filters