https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-10800.htmlhttps://patchthecve.com/cve/CVE-2025-10800.htmlWed, 17 Jun 2026 08:29:01 +0000HIGH 7.3: A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available tohttps://patchthecve.com/cve/CVE-2025-10668.htmlhttps://patchthecve.com/cve/CVE-2025-10668.htmlWed, 17 Jun 2026 08:28:44 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publichttps://patchthecve.com/cve/CVE-2025-10667.htmlhttps://patchthecve.com/cve/CVE-2025-10667.htmlWed, 17 Jun 2026 08:28:43 +0000HIGH 7.3: A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/compose_msg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been mahttps://patchthecve.com/cve/CVE-2025-10068.htmlhttps://patchthecve.com/cve/CVE-2025-10068.htmlWed, 30 Sep 2026 23:10:00 +0000HIGH 7.3: A flaw has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/admin_forum/add_views.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may https://patchthecve.com/cve/CVE-2025-10033.htmlhttps://patchthecve.com/cve/CVE-2025-10033.htmlWed, 17 Jun 2026 08:27:33 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2024-52676.htmlhttps://patchthecve.com/cve/CVE-2024-52676.htmlWed, 17 Jun 2026 08:07:32 +0000MEDIUM 5.4: Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS) via /bcc_forum/members/home.php.https://patchthecve.com/cve/CVE-2024-37869.htmlhttps://patchthecve.com/cve/CVE-2024-37869.htmlWed, 17 Jun 2026 07:38:57 +0000HIGH 8.8: File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "poster.php" file, and the uploaded file was received using the "$- FILES" variablehttps://patchthecve.com/cve/CVE-2024-37868.htmlhttps://patchthecve.com/cve/CVE-2024-37868.htmlWed, 17 Jun 2026 07:38:57 +0000HIGH 8.8: File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "sendreply.php" file, and the uploaded file was received using the "$- FILES" variable.https://patchthecve.com/cve/CVE-2024-37871.htmlhttps://patchthecve.com/cve/CVE-2024-37871.htmlWed, 17 Jun 2026 07:38:57 +0000HIGH 8.2: SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.https://patchthecve.com/cve/CVE-2024-5734.htmlhttps://patchthecve.com/cve/CVE-2024-5734.htmlWed, 17 Jun 2026 08:16:33 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. Affected is an unknown function of the file /members/poster.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been https://patchthecve.com/cve/CVE-2024-5733.htmlhttps://patchthecve.com/cve/CVE-2024-5733.htmlWed, 17 Jun 2026 08:16:33 +0000HIGH 7.3: A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been rated as critical. This issue affects some unknown processing of the file register_me.php. The manipulation of the argument eaddress leads to sql injection. The attack may be initiated remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2024-5518.htmlhttps://patchthecve.com/cve/CVE-2024-5518.htmlWed, 17 Jun 2026 08:16:06 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file change_profile_picture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has