CVE-2025-10668: falha de média gravidade em itsourcecode Online Discussion Forum
itsourcecode Online Discussion Forum compose_msg_admin.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Online Discussion ForumCVEs relacionadas — itsourcecode Online Discussion Forum
No mesmo produto, das mais perigosas para as menos.
CVE-2024-5518MEDIUMitsourcecode Online Discussion Forum change_profile_picture.php unrestricted uploadEPSS 0.8%CVE-2024-5733MEDIUMitsourcecode Online Discussion Forum register_me.php sql injectionEPSS 0.6%CVE-2024-5734MEDIUMitsourcecode Online Discussion Forum poster.php unrestricted uploadEPSS 0.6%CVE-2025-10667MEDIUMitsourcecode Online Discussion Forum compose_msg.php sql injectionEPSS 0.5%CVE-2025-10800MEDIUMitsourcecode Online Discussion Forum index.php sql injectionEPSS 0.5%CVE-2025-10033MEDIUMitsourcecode Online Discussion Forum admin sql injectionEPSS 0.5%