CVE-2015-1435

Description

References

• mylittleforum.net/forum/index.php · Vendor Advisory
• packetstormsecurity.com/files/130356/My-Little-Forum-2.3.3-Cross-Site-Scripting-SQL-Injection.html · Exploit
• securityfocus.com/archive/1/534681/100/0/threaded · Exploit
• securityfocus.com/bid/72582 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/100856 · Third Party Advisory
• htbridge.com/advisory/HTB23248 · Exploit

Más vulnerabilidades de my little forum

• CVE-2026-25923CRÍTICO 9.1my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the appl…
• CVE-2019-12253MEDIO 6.5my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
• CVE-2018-15569MEDIO 6.5my little forum 2.4.12 allows CSRF for deletion of users.
• CVE-2018-14937MEDIO 4.8The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.
• CVE-2018-14936MEDIO 4.8The Add page option in my little forum 2.4.12 allows XSS via the Title field.