PT-2025-27349 · Code Projects · Code-Projects Simple Forum
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
code-projects Simple Forum version 1.0
Description:
A critical issue was found in the code, affecting the /forum edit.php file. The manipulation of the
iii argument leads to SQL injection. This issue can be exploited remotely.Recommendations:
For code-projects Simple Forum version 1.0, consider restricting access to the /forum edit.php file until a patch is available. As a temporary workaround, avoid using the
iii argument in the affected file to minimize the risk of exploitation.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Code-Projects Simple Forum