Threat Intelligence Database

CVE-2026-6031 is a SQL injection vulnerability in code-projects Simple IT Discussion Forum version 1.0. The issue exists in the /add-category-function.php file where manipulation of the Category argument allows remote attackers to execute SQL injection attacks. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. There is no official patch or remediation level provided by the vendor, and no known exploits have been observed in the wild. The vulnerability disclosure is public, which may increase risk if not addressed.

A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /admin/user.php. Such manipulation of the argument fname leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /crud.php. The manipulation of the argument user_Id results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

CVE-2026-5829 is a SQL injection vulnerability in code-projects Simple IT Discussion Forum version 1.0. The issue exists in an unknown function within the /pages/content.php file, where manipulation of the post_id argument allows SQL injection. This vulnerability can be exploited remotely without authentication. The exploit has been publicly disclosed, but no official patch or remediation guidance is currently available.

CVE-2026-5828 is a medium severity SQL injection vulnerability in code-projects Simple IT Discussion Forum version 1.0. The vulnerability exists in an unknown function within the /functions/addcomment.php file, where manipulation of the postid argument allows for SQL injection. This flaw can be exploited remotely without authentication. No official patch or remediation guidance is currently available, and while an exploit has been publicly disclosed, there are no confirmed reports of exploitation in the wild.

A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.