EUVD-2025-19473Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack over network with low complexity, no privileges or interaction needed, low impact on all three areas.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability was found in code-projects Simple Forum 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /register1.php. The manipulation of the argument User leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
SQL injection in Simple Forum 1.0 allows remote attackers to execute arbitrary SQL queries via the User parameter in /register1.php. A public exploit is available on GitHub, increasing the likelihood of targeted attacks, though the EPSS score is low at 0.06% indicating limited active exploitation at present.
Technical ContextAI
The vulnerability is an SQL injection (CWE-74) in a PHP-based forum application that interacts with a MySQL database. The affected file /register1.php takes user input from the User argument and directly incorporates it into SQL queries without sanitization. The vulnerable product is Simple Forum version 1.0, identified by CPE cpe:2.3:a:fabian:simple_forum:1.0. The CVSS vector indicates the attack requires no authentication or user interaction, and can be executed over the network with low complexity, allowing remote unauthenticated exploitation.
RemediationAI
No vendor-released patch is identified at time of analysis. The vendor website (code-projects.org) may provide updates, but no fix has been explicitly referenced. As a workaround, implement input validation and parameterized queries in the /register1.php script to neutralize SQL injection attempts. Restrict access to this endpoint via web application firewall rules or authentication if the registration functionality is not essential. Alternatively, consider migrating to a supported forum solution. Side effects of blocking the endpoint include preventing new user registration.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C
Roundcube Webmail contains a critical PHP object deserialization vulnerability (CVE-2025-49113, CVSS 9.9) that allows au
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
Palo Alto Networks PAN-OS management web interface contains an authentication bypass allowing unauthenticated attackers
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
Share
External POC / Exploit Code
Leaving vuln.today