Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mylittleforum my little forum vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2010-2133
SQL injection vulnerability in contact.php in My Little Forum allows remote malicious users to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942.
Mylittleforum My Little Forum 2.2Mylittleforum My Little Forum 2.1.4Mylittleforum My Little Forum 2.1.3Mylittleforum My Little Forum 2.1.2Mylittleforum My Little Forum 2.2.2Mylittleforum My Little Forum 2.2.1Mylittleforum My Little Forum 1.7.6Mylittleforum My Little Forum 2.2.3Mylittleforum My Little Forum 2.1.1Mylittleforum My Little Forum 2.0.2
4.3
CVSSv2
CVE-2015-1475
Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote malicious users to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or ...
Mylittleforum My Little Forum 1.7Mylittleforum My Little Forum 2.3.3Mylittleforum My Little Forum 2.2
4.3
CVSSv2
CVE-2015-1435
Cross-site scripting (XSS) vulnerability in my little forum prior to 2.3.4 allows remote malicious users to inject arbitrary web script or HTML via the back parameter to index.php.
Mylittleforum My Little Forum
6.5
CVSSv2
CVE-2015-1434
Multiple SQL injection vulnerabilities in my little forum prior to 2.3.4 allow remote administrators to execute arbitrary SQL commands via the (1) letter parameter in a user action or (2) edit_category parameter to index.php.
Mylittleforum My Little Forum
5.8
CVSSv2
CVE-2019-12253
my little forum prior to 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
Mylittleforum My Little Forum
3.5
CVSSv2
CVE-2018-14936
The Add page option in my little forum 2.4.12 allows XSS via the Title field.
Mylittleforum My Little Forum 2.4.12
3.5
CVSSv2
CVE-2018-14937
The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.
Mylittleforum My Little Forum 2.4.12
4.3
CVSSv2
CVE-2018-15569
my little forum 2.4.12 allows CSRF for deletion of users.
Mylittleforum My Little Forum 2.4.12
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook