CVE-2026-5827: code-projects Simple IT Discussion Forum question-function.php sql injection
A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5827?
CVE-2026-5827 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-5827?
To fix CVE-2026-5827, you should implement input validation and prepared statements in the /question-function.php file.
What software is affected by CVE-2026-5827?
CVE-2026-5827 affects version 1.0 of the code-projects Simple IT Discussion Forum software.
What type of vulnerability is CVE-2026-5827?
CVE-2026-5827 is an SQL injection vulnerability that allows unauthorized SQL queries via user input.
How can CVE-2026-5827 be exploited?
CVE-2026-5827 can be exploited by manipulating the 'content' argument in the /question-function.php file to execute arbitrary SQL commands.