VULNERABILITY INTELLIGENCE

CVE-2024-37871

CVSS score8.2 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2024-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Description

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89

Primary references