ORETNOM23 Simple Forum/discussion System vulnerabilities

4 CVEs affecting ORETNOM23 Simple Forum/discussion System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10790, published 2025-09-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-45252, published 2021-12-21. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are manage_topic.php, manage_user.php, and ajax.php. The attacker can be…
CVE-2024-9032, published 2024-09-20. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the…
CVE-2025-10100, published 2025-09-08. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /admin_class.php?action=login. Performing manipulation of the argument…
CVE-2025-10790, published 2025-09-22. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=save_category. The manipulation of the argument…