CVE-2015-1435

概要

参考情報

• mylittleforum.net/forum/index.php · Vendor Advisory
• packetstormsecurity.com/files/130356/My-Little-Forum-2.3.3-Cross-Site-Scripting-SQL-Injection.html · Exploit
• securityfocus.com/archive/1/534681/100/0/threaded · Exploit
• securityfocus.com/bid/72582 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/100856 · Third Party Advisory
• htbridge.com/advisory/HTB23248 · Exploit

my little forum のその他の脆弱性

• CVE-2026-25923緊急 9.1my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the appl…
• CVE-2019-12253中 6.5my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
• CVE-2018-15569中 6.5my little forum 2.4.12 allows CSRF for deletion of users.
• CVE-2018-14937中 4.8The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.
• CVE-2018-14936中 4.8The Add page option in my little forum 2.4.12 allows XSS via the Title field.