https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-10033.htmlhttps://patchthecve.com/cve/CVE-2025-10033.htmlWed, 17 Jun 2026 08:27:33 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2024-52676.htmlhttps://patchthecve.com/cve/CVE-2024-52676.htmlWed, 17 Jun 2026 08:07:32 +0000MEDIUM 5.4: Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS) via /bcc_forum/members/home.php.https://patchthecve.com/cve/CVE-2024-37869.htmlhttps://patchthecve.com/cve/CVE-2024-37869.htmlWed, 17 Jun 2026 07:38:57 +0000HIGH 8.8: File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "poster.php" file, and the uploaded file was received using the "$- FILES" variablehttps://patchthecve.com/cve/CVE-2024-37868.htmlhttps://patchthecve.com/cve/CVE-2024-37868.htmlWed, 17 Jun 2026 07:38:57 +0000HIGH 8.8: File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "sendreply.php" file, and the uploaded file was received using the "$- FILES" variable.