Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2015-1475

Disclosure Date: February 04, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or (b) forum_entry.php.
0
0
Attacker Value
Unknown

CVE-2010-2133

Disclosure Date: June 02, 2010 (last updated October 04, 2023)
SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942.
0
0
Attacker Value
Unknown

CVE-2008-4871

Disclosure Date: November 01, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags.
0
0
Attacker Value
Unknown

CVE-2007-2103

Disclosure Date: April 18, 2007 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php and (2) timedifference.php.
0
0