CVE-2025-10068: itsourcecode Online Discussion Forum add_views.php sql injection
A flaw has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/adminforum/addviews.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10068?
CVE-2025-10068 has a high severity due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-10068?
To fix CVE-2025-10068, validate and sanitize all input parameters in the affected functions to prevent SQL injection.
What type of vulnerability is CVE-2025-10068?
CVE-2025-10068 is classified as an SQL injection vulnerability affecting the admin functionality of the Online Discussion Forum.
Who is affected by CVE-2025-10068?
Those using itsourcecode Online Discussion Forum version 1.0 and operating the vulnerable admin module can be impacted by CVE-2025-10068.
Can CVE-2025-10068 be exploited remotely?
Yes, CVE-2025-10068 can be exploited remotely due to its nature allowing manipulation of the argument ID.