CVE-2024-37871
SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute…
High · published July 9, 2024
What it is
SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.
The record
Technical detail
- CVSS v3.1
- 8.2 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00454 · 38.4th percentile
- Published
- 2024-07-09T00:00Z
EPSS history
Timeline