Vulnerabilities

TI-2025-09209 CVE-2025-10033 · GHSA-8v6v-g2qj-vg8m

itsourcecode Online Discussion Forum admin sql injection

HIGH 70

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00469 Published 2025-09-06 No fix listed CWE-74

TI-2024-35271 CVE-2024-52676 · GHSA-m97p-7pjw-xw7r

Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site…

MEDIUM 58

Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS) via /bcc_forum/members/home.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00268 Published 2024-12-04 No fix listed CWE-79

TI-2024-25189 CVE-2024-37869 · GHSA-vf2m-6wph-fchf

File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a…

HIGH 73

File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "poster.php" file, and the uploaded file was received using the "$- FILES" variab…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0108 Published 2024-10-04 No fix listed CWE-434

TI-2024-25188 CVE-2024-37868 · GHSA-8cpm-p3f3-45f7

File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a…

HIGH 73

File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "sendreply.php" file, and the uploaded file was received using the "$- FILES" var…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0108 Published 2024-10-04 No fix listed CWE-434

TI-2024-06900 CVE-2024-7446 · GHSA-3fr4-6j9r-w2r5

itsourcecode Ticket Reservation System list_tickets.php sql injection

MEDIUM 56

A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00613 Published 2024-08-03 No fix listed CWE-89

TI-2024-06899 CVE-2024-7445 · GHSA-4wqq-mhqm-j8fh

itsourcecode Ticket Reservation System checkout_ticket_save.php sql injection

MEDIUM 56

A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00567 Published 2024-08-03 No fix listed CWE-89

TI-2024-06898 CVE-2024-7444 · GHSA-5cjw-xf6c-qrgq

itsourcecode Ticket Reservation System Login Page login.php sql injection

HIGH 70

A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00646 Published 2024-08-03 No fix listed CWE-89

TI-2024-05129 CVE-2024-5518

itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload

MEDIUM 57

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00752 Published 2024-05-30 No fix listed CWE-434

Vulnerabilities

Filters