CVE-2025-6850: code-projects Simple Forum forum1.php sql injection
A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6850?
CVE-2025-6850 is classified as critical due to its potential for remote SQL injection exploitation.
How do I fix CVE-2025-6850?
To fix CVE-2025-6850, sanitize and validate all user inputs, particularly those handled by the /forum1.php file.
What type of vulnerability is CVE-2025-6850?
CVE-2025-6850 is an SQL injection vulnerability affecting the Simple Forum application.
Can CVE-2025-6850 be exploited remotely?
Yes, CVE-2025-6850 can be exploited remotely, allowing attackers to manipulate the input to execute SQL commands.
Which software is affected by CVE-2025-6850?
CVE-2025-6850 affects version 1.0 of the Code-projects Simple Forum software.