Online Discussion Forum Site CVE-2022-31295

HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2022-06-16 cve@mitre.org

Authentication Bypass Online Discussion Forum Site

7.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

1

CVE Published

Jun 16, 2022 - 20:15 nvd

HIGH 7.5

DescriptionNVD

An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.

AnalysisAI

An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-639. An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts. Affected products include: Razormist Online Discussion Forum Site.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Online Discussion Forum Site

View all

CVE-2024-2690 CRITICAL Act Now POC

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. Rated critical severity (CVSS 9.8), this v

CVE-2023-3152 HIGH This Week POC

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. Rated high sev

CVE-2023-3151 HIGH This Week POC

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. Rated high severity (CVSS 8.8), this vulne

CVE-2023-3150 HIGH This Week POC

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. Rated high severity (CVSS 8.8), this vulne

CVE-2023-3149 HIGH This Week POC

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. Rated high severity (CVSS 8.8), this vulne

CVE-2023-3148 HIGH This Week POC

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical.php. Rated high

CVE-2023-3147 HIGH This Week POC

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. Rated high

CVE-2023-3146 HIGH This Week POC

A vulnerability, which was classified as critical, was found in SourceCodester Online Discussion Forum Site 1.0. Rated h

CVE-2023-3145 HIGH This Week POC

A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0. Ra

CVE-2022-31911 HIGH This Week POC

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team. Rated high

CVE-2024-4920 MEDIUM This Month POC

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. Rated medium severity (CVSS 6.9), this vul

CVE-2022-31294 MEDIUM This Month POC

An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily

Same weakness CWE-639 – Authorization Bypass Through User-Controlled Key

View all

CVE-2024-50483 CRITICAL

CVE-2026-55255 HIGH POC

CVE-2025-3605 CRITICAL POC

CVE-2022-3805 HIGH POC

CVE-2025-5947 CRITICAL POC

CVE-2020-36923 CRITICAL POC

CVE-2023-3048 CRITICAL POC

CVE-2024-27730 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2022-31295 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy