CVE-2024-37871

PoC —

CVSS 3.1

8.2 high

EPSS

<1%p38

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jun 17, 2026

Description

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.

Vendors: emiloi
Products: online discussion forum
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.