ML
Product
MY Little Forum
9
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 4Low 0
Watch
Add MY Little Forum to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25923 | 9.1 | Feb 9 | Phar Deserialization leading to Arbitrary File Deletion in my little forum Affected: before 20260208.1 |
| CVE-2019-12253 | 6.5 | May 21 | my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting Affected: before 2.4.20 |
| CVE-2018-15569 | 6.5 | Aug 20 | my little forum 2.4.12 allows CSRF for deletion of users Affected: 2.4.12 |
| CVE-2018-14936 | 4.8 | Aug 5 | The Add page option in my little forum 2.4.12 allows XSS via the Title field Affected: 2.4.12 |
| CVE-2018-14937 | 4.8 | Aug 5 | The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field Affected: 2.4.12 |
| CVE-2015-1435 | – | Feb 16 | Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to index.php Affected: through 2.3.3 |
| CVE-2015-1434 | – | Feb 16 | Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the (1) letter parameter in a user action… Affected: through 2.3.3 |
| CVE-2015-1475 | – | Feb 4 | Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2)… Affected: 1.7; 2.2; 2.3.3 |
| CVE-2010-2133 | – | Jun 2 | SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942 Affected: 1.7.6; 2.0.2; 2.1.1; 2.1.2; 2.1.3; 2.1.4; +4 more |
Showing 9