MY
Vendor
Mylittleforum
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-25923 | ML MY Little Forum Mylittleforum | 9.1 | Feb 9 | Phar Deserialization leading to Arbitrary File Deletion in my little forum |
| CVE-2019-12253 | ML MY Little Forum Mylittleforum | 6.5 | May 21 | my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting |
| CVE-2018-15569 | ML MY Little Forum Mylittleforum | 6.5 | Aug 20 | my little forum 2.4.12 allows CSRF for deletion of users |
| CVE-2018-14936 | ML MY Little Forum Mylittleforum | 4.8 | Aug 5 | The Add page option in my little forum 2.4.12 allows XSS via the Title field |
| CVE-2018-14937 | ML MY Little Forum Mylittleforum | 4.8 | Aug 5 | The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field |
| CVE-2015-1435 | ML MY Little Forum Mylittleforum | – | Feb 16 | Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to index.php |
| CVE-2015-1434 | ML MY Little Forum Mylittleforum | – | Feb 16 | Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the (1) letter parameter in a user action… |
| CVE-2015-1475 | ML MY Little Forum Mylittleforum | – | Feb 4 | Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2)… |
| CVE-2010-2133 | ML MY Little Forum Mylittleforum | – | Jun 2 | SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942 |