mylittleforum vulnerabilities

2 known vulnerabilities in mylittleforum from My-Little-Forum. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  mylittleforum: Unrestricted Upload of File with Dangerous Type

  CVE-2026-25923Feb 9, 2026My-Little-Forum

  my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot f

• 8.8 High severity

  mylittleforum: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-62606Oct 22, 2025My-Little-Forum

  my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitra