What is CVE-2024-37871?

CVE-2024-37871 is a high-severity vulnerability in Emiloi Online_discussion_forum, classified under SQL Injection. CVSS score: 8.2/10. Published 2024-07-09.

How severe is CVE-2024-37871?

High severity. CVSS v3 base score is 8.2 out of 10.

SQL Injection in Emiloi Online_discussion_forum

CVE-2024-37871

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.

Vulnerability class: SQL Injection

EPSS: 0.005 (36.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N.

Affected products

Emiloi Online_discussion_forum — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2024-37871?: CVE-2024-37871 is a high-severity vulnerability in Emiloi Online_discussion_forum, classified under SQL Injection. CVSS score: 8.2/10. Published 2024-07-09.
How severe is CVE-2024-37871?: High severity. CVSS v3 base score is 8.2 out of 10.