Simple IT Discussion Forum vulnerabilities

A vulnerability was found in code-projects Simple IT Discussion Forum 1.0 in the file /pages/content.php. Manipulation of the post_id argument leads to SQL injection. Remote exploitation is possible and the exploit is publicly disclosed.

In Simple IT Discussion Forum 1.0, the file /functions/addcomment.php is vulnerable to SQL injection via the postid parameter. The attack can be launched remotely and the exploit has been made public.

A vulnerability in Simple IT Discussion Forum 1.0 allows SQL injection via the content argument in /question-function.php. The attack can be performed remotely and the exploit is publicly available.

code-projects Simple IT Discussion Forum 1.0 has a cross-site scripting vulnerability in /edit-category.php via the Category argument. The attack can be launched remotely. The exploit has been published and may be used.

A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0 in the file /edit-category.php of the Parameter Handler component. Manipulation of the cat_id argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly disclosed.