Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2997▼ 66 respecto a la semana anterior

Críticas / altas1460▲ 109 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-3143	Analizada	Media (5.4)	0.61%	—	Razormist Online Discussion Forum Site	7/6/2023	17/6/2026	A vulnerability classified as problematic has been found in SourceCodester Online Discussion Forum Site 1.0. Affected is an unknown function of the file admin\posts\manage_post.php. The manipulation of the argument content leads to cross site scripting. It is possible to launch the attack remotely. The exploit has…
CVE-2022-31296	Modificada	Crítica (9.8)	2.4%	💥 PoC	Online Discussion Forum Project Online Discussion Forum	17/6/2022	17/6/2026	Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.
CVE-2022-31295	Modificada	Alta (7.5)	1.4%	💥 PoC	Razormist Online Discussion Forum Site	16/6/2022	17/6/2026	An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.
CVE-2022-31294	Modificada	Media (6.5)	0.85%	💥 PoC	Razormist Online Discussion Forum Site	16/6/2022	17/6/2026	An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts.
CVE-2022-31913	Modificada	Media (4.8)	0.50%	—	Razormist Online Discussion Forum Site	16/6/2022	17/6/2026	Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name.
CVE-2022-31911	Modificada	Alta (7.2)	0.96%	—	Razormist Online Discussion Forum Site	16/6/2022	17/6/2026	Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.
CVE-2020-28141	Modificada	Media (5.4)	0.60%	—	Online Discussion Forum Project Online Discussion Forum	19/4/2021	17/6/2026	The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page.