CVE-2025-10033: falha de média gravidade em itsourcecode Online Discussion Forum
itsourcecode Online Discussion Forum admin sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.5%
A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Online Discussion ForumCVEs relacionadas — itsourcecode Online Discussion Forum
No mesmo produto, das mais perigosas para as menos.
CVE-2024-5518MEDIUMitsourcecode Online Discussion Forum change_profile_picture.php unrestricted uploadEPSS 0.8%CVE-2024-5733MEDIUMitsourcecode Online Discussion Forum register_me.php sql injectionEPSS 0.6%CVE-2024-5734MEDIUMitsourcecode Online Discussion Forum poster.php unrestricted uploadEPSS 0.6%CVE-2025-10667MEDIUMitsourcecode Online Discussion Forum compose_msg.php sql injectionEPSS 0.5%CVE-2025-10800MEDIUMitsourcecode Online Discussion Forum index.php sql injectionEPSS 0.5%CVE-2025-10068MEDIUMitsourcecode Online Discussion Forum add_views.php sql injectionEPSS 0.4%