High severity · published Jul 9, 2024
CVE-2024-37871
SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via…
8.2
CVSS
0.5%
EPSS
No
On KEV
Description
SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OD
Online Discussion Forum · Emiloi
1.0 · source: NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-37871
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-37871
Exploit
https://github.com/TThuyyy/cve1/issues/1
More from Online Discussion Forum
9.8
CVE-2025-10800
itsourcecode Online Discussion Forum index.php sql injection
9.8
CVE-2025-10668
itsourcecode Online Discussion Forum compose_msg_admin.php sql injection
9.8
CVE-2025-10667
itsourcecode Online Discussion Forum compose_msg.php sql injection
9.8
CVE-2025-10604
PHPGurukul Online Discussion Forum edit_member.php sql injection
9.8
CVE-2025-10603
PHPGurukul Online Discussion Forum search_result.php sql injection