PT-2025-36372 · Unknown · Itsourcecode Online Discussion Forum
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
itsourcecode Online Discussion Forum version 1.0
Description
A SQL injection issue exists in itsourcecode Online Discussion Forum 1.0. The issue affects an unknown function within the
/admin file. Manipulation of the Username parameter can lead to SQL injection. The exploit has been publicly disclosed.Recommendations
As a temporary workaround, consider restricting access to the
/admin file to minimize the risk of exploitation.
Avoid using the Username parameter in the affected file until the issue is resolved.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Itsourcecode Online Discussion Forum