Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-31296 1 Online Discussion Forum Project 1 Online Discussion Forum 2024-11-21 9.8 Critical
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.
CVE-2020-28141 1 Online Discussion Forum Project 1 Online Discussion Forum 2024-11-21 5.4 Medium
The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page.