6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A flaw has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/admin_forum/add_views.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Basic Information
ID
CVE-2025-10068
Source
VulDB
Published
Sep 7, 2025 at 04:32
Affected Product
Vendor
itsourcecode
Product
Online Discussion Forum
Version
1.0
Affected Versions
itsourcecode Online Discussion Forum 1.0