Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=savecategory, name.
An issue in the deletepost() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.
An issue in the saveusers() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts.
Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam.