My-Little-Forum vulnerabilities
We track 2 vulnerabilities in My-Little-Forum products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 9, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest My-Little-Forum vulnerabilities
- 9.1 Critical severity
mylittleforum: Unrestricted Upload of File with Dangerous Type
my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot f
- 8.8 High severity
mylittleforum: Improper Neutralization of Special Elements used in an SQL Command
my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitra