CNNVD-202602-1256 Information

CNNVD ID

CNNVD-202602-1256

CVE-2026-25923

  • CNNVD Published: 2026-02-09

Description (Chinese)

my little forum是My Little Forum开源的一套基于PHP和MySQL的在线论坛系统。 my little forum 20260208.1之前版本存在代码问题漏洞,该漏洞源于URL验证未过滤phar协议,可能导致任意文件删除。

Description (English)

My little Forum is an online PHP and MySQL-based platform system for My Little Forum. Before my little forum 20600208.1, there was a code problem loophole, which originated from the URL certification of unfiltered nar protocols, which could lead to the deletion of any file.

Vulnerability Type

代码问题

Affected Vendor

My Little Forum

Published

2026-02-09

Last Modified

2026-02-24

References

https://github.com/My-Little-Forum/mylittleforum/releases/tag/20260208.1 https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-wr9p-3c3g-78fw

Patch

https://mylittleforum.net/index.php

Share on: