CNNVD-202510-2838 Information
CNNVD ID
CNNVD-202510-2838
Related CVE
- CNNVD Published: 2025-10-22
Description (Chinese)
my little forum是My Little Forum开源的一套基于PHP和MySQL的在线论坛系统。 my little forum 2.5.12之前版本存在安全漏洞，该漏洞源于书签重新排序功能存在SQL注入，可能导致数据库完全破解。
Description (English)
My little Forum is an online PHP and MySQL-based platform system for My Little Forum. There was a security loophole in the previous version of my little Forum 2.5.12, which stemmed from the SQL injection of the bookmark reordering function, which could lead to a complete breakdown of the database.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
My Little Forum
Published
2025-10-22
Last Modified
2026-02-24
References
https://github.com/My-Little-Forum/mylittleforum/releases/tag/20251021.1 https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-m8hj-c6gr-6h6v https://access.redhat.com/security/cve/cve-2025-62606
Patch
https://github.com/My-Little-Forum/mylittleforum/releases
Share on: