CVE-2025-10800: falha de média gravidade em itsourcecode Online Discussion Forum
itsourcecode Online Discussion Forum index.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.5%
A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Online Discussion ForumCVEs relacionadas — itsourcecode Online Discussion Forum
No mesmo produto, das mais perigosas para as menos.
CVE-2024-5518MEDIUMitsourcecode Online Discussion Forum change_profile_picture.php unrestricted uploadEPSS 0.8%CVE-2024-5733MEDIUMitsourcecode Online Discussion Forum register_me.php sql injectionEPSS 0.6%CVE-2024-5734MEDIUMitsourcecode Online Discussion Forum poster.php unrestricted uploadEPSS 0.6%CVE-2025-10667MEDIUMitsourcecode Online Discussion Forum compose_msg.php sql injectionEPSS 0.5%CVE-2025-10033MEDIUMitsourcecode Online Discussion Forum admin sql injectionEPSS 0.5%CVE-2025-10068MEDIUMitsourcecode Online Discussion Forum add_views.php sql injectionEPSS 0.4%