Show filters
23 Total Results
Displaying 21-23 of 23
Sort by:
Attacker Value
Unknown

CVE-2022-31913

Disclosure Date: June 16, 2022 (last updated February 23, 2025)
Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name.
Attacker Value
Unknown

CVE-2022-31911

Disclosure Date: June 16, 2022 (last updated February 23, 2025)
Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.
Attacker Value
Unknown

CVE-2020-28141

Disclosure Date: April 19, 2021 (last updated February 22, 2025)
The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page.