Search Results (5 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-5828 1 Code-projects 1 Simple It Discussion Forum 2026-04-09 7.3 High
A vulnerability was found in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /functions/addcomment.php. The manipulation of the argument postid results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
CVE-2026-5826 1 Code-projects 1 Simple It Discussion Forum 2026-04-09 4.3 Medium
A flaw has been found in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /edit-category.php. Executing a manipulation of the argument Category can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used.
CVE-2026-5827 1 Code-projects 1 Simple It Discussion Forum 2026-04-09 7.3 High
A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-5829 1 Code-projects 1 Simple It Discussion Forum 2026-04-09 7.3 High
A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0. The impacted element is an unknown function of the file /pages/content.php. This manipulation of the argument post_id causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
CVE-2026-5672 1 Code-projects 1 Simple It Discussion Forum 2026-04-07 7.3 High
A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /edit-category.php of the component Parameter Handler. The manipulation of the argument cat_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.