CVE-2015-1435

Description

References

• mylittleforum.net/forum/index.php · Vendor Advisory
• packetstormsecurity.com/files/130356/My-Little-Forum-2.3.3-Cross-Site-Scripting-SQL-Injection.html · Exploit
• securityfocus.com/archive/1/534681/100/0/threaded · Exploit
• securityfocus.com/bid/72582 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/100856 · Third Party Advisory
• htbridge.com/advisory/HTB23248 · Exploit

my little forum의 다른 취약점

• CVE-2026-25923심각 9.1my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the appl…
• CVE-2019-12253보통 6.5my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
• CVE-2018-15569보통 6.5my little forum 2.4.12 allows CSRF for deletion of users.
• CVE-2018-14937보통 4.8The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.
• CVE-2018-14936보통 4.8The Add page option in my little forum 2.4.12 allows XSS via the Title field.