code-projects Simple IT Discussion Forum vulnerabilities

Latest code-projects Simple IT Discussion Forum CVEs

Newest publication first

1. CVE-2026-6031 code-projects Simple IT Discussion Forum add-category-function.php sql injection

   Published 2026-04-10

   Medium·CVSS 6.9 EPSS 0.37%

   A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. This affects an unknown function of the file /add-category-function.php. Such manipulation of the argument Category leads to sql injection. The attack can be executed remotely. The exploit has been di...

2. CVE-2026-6004 code-projects Simple IT Discussion Forum delete-category.php sql injection

   Published 2026-04-10

   Medium·CVSS 6.9 EPSS 0.26%

   A vulnerability was detected in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /delete-category.php. Performing a manipulation of the argument cat_id results in sql injection. It is possible to initiate the attack remotely. The exploit i...

3. CVE-2026-6003 code-projects Simple IT Discussion Forum user.php cross site scripting

   Published 2026-04-10

   Medium·CVSS 4.8 EPSS 0.21%

   A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /admin/user.php. Such manipulation of the argument fname leads to cross site scripting. The attack may be performed from remote. The...

4. CVE-2026-5985 code-projects Simple IT Discussion Forum crud.php sql injection

   Published 2026-04-09

   Medium·CVSS 6.9 EPSS 0.26%

   A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /crud.php. The manipulation of the argument user_Id results in sql injection. The attack may be performed from remote. The exploit has been...

5. CVE-2026-5961 code-projects Simple IT Discussion Forum topic-details.php sql injection

   Published 2026-04-09

   Medium·CVSS 6.9 EPSS 0.26%

   A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This vulnerability affects unknown code of the file /topic-details.php. The manipulation of the argument post_id leads to sql injection. The attack may be initiated remotely. The exploit h...

6. CVE-2026-5829 code-projects Simple IT Discussion Forum content.php sql injection

   Published 2026-04-09

   Medium·CVSS 6.9 EPSS 0.26%

   A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0. The impacted element is an unknown function of the file /pages/content.php. This manipulation of the argument post_id causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7. CVE-2026-5828 code-projects Simple IT Discussion Forum addcomment.php sql injection

   Published 2026-04-09

   Medium·CVSS 6.9 EPSS 0.33%

   A vulnerability was found in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /functions/addcomment.php. The manipulation of the argument postid results in sql injection. The attack may be launched remotely. The exploit has bee...

8. CVE-2026-5827 code-projects Simple IT Discussion Forum question-function.php sql injection

   Published 2026-04-09

   Medium·CVSS 6.9 EPSS 0.35%

   A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...

9. CVE-2026-5826 code-projects Simple IT Discussion Forum edit-category.php cross site scripting

   Published 2026-04-09

   Medium·CVSS 5.3 EPSS 0.37%

   A flaw has been found in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /edit-category.php. Executing a manipulation of the argument Category can lead to cross site scripting. The attack can be launched remotely. The exploit h...

10. CVE-2026-5672 code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection

    Published 2026-04-06

    Medium·CVSS 6.9 EPSS 0.26%

    A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /edit-category.php of the component Parameter Handler. The manipulation of the argument cat_id leads to sql injection. It is possible t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.