CVE-2015-1434: Mylittleforum My Little Forum

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the (1) letter parameter in a user action or (2) edit_category parameter to index.php.

Affected products

• Mylittleforum My Little Forum: up to and including 2.3.3

Published 2015-02-16. Last modified 2026-06-17.