CVE-2015-1434

Description

References

• mylittleforum.net/forum/index.php · Vendor Advisory
• packetstormsecurity.com/files/130356/My-Little-Forum-2.3.3-Cross-Site-Scripting-SQL-Injection.html · Exploit
• securityfocus.com/archive/1/534681/100/0/threaded · Exploit
• securityfocus.com/bid/72575 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/100855 · Third Party Advisory
• htbridge.com/advisory/HTB23248 · Exploit

Weitere Schwachstellen in my little forum

• CVE-2026-25923KRITISCH 9.1my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the appl…
• CVE-2019-12253MITTEL 6.5my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
• CVE-2018-15569MITTEL 6.5my little forum 2.4.12 allows CSRF for deletion of users.
• CVE-2018-14937MITTEL 4.8The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.
• CVE-2018-14936MITTEL 4.8The Add page option in my little forum 2.4.12 allows XSS via the Title field.