CVE-2026-5672: code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection
A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /edit-category.php of the component Parameter Handler. The manipulation of the argument catid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5672?
CVE-2026-5672 is considered a critical SQL injection vulnerability that can lead to unauthorized data access.
How do I fix CVE-2026-5672?
To fix CVE-2026-5672, it is recommended to validate and sanitize user inputs in the edit-category.php file.
Who is affected by CVE-2026-5672?
CVE-2026-5672 affects users of Code-Projects Simple IT Discussion Forum version 1.0.
What type of vulnerability is CVE-2026-5672?
CVE-2026-5672 is a SQL injection vulnerability that allows attackers to manipulate queries to the database.
What component is involved in CVE-2026-5672?
The component involved in CVE-2026-5672 is the Parameter Handler in the edit-category.php file.