CVE-2024-37871

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.

CVSS v3.1

8.2 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

EPSS

0.45% chance of exploitation in the next 30 days, 38th percentile

Published

2024-07-09

Updated

2024-08-02

Proof-of-concept exploits (1)

• TThuyyy/cve1/issues/1

References

• CVE Record
• NVD entry

Related

• CVE-2024-37870
• CVE-2024-37872
• CVE-2024-37873
• CVE-2025-11397
• CVE-2025-11398
• CVE-2025-11401