Description
A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Simple Forum | 1.0 |
References
- https://code-projects.org/Product
- https://github.com/ez-lbz/poc/issues/20Exploit, Issue Tracking
- https://vuldb.com/?ctiid.314293Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.314293Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.603352Third Party Advisory, VDB Entry
- https://github.com/ez-lbz/poc/issues/20Exploit, Issue Tracking
Timeline
- Published
- Jun 29, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed