CVE-2026-5828

HIGH

A vulnerability was found in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /functions/addcomment.php. The manipulation of the argument postid results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.

CVSS v3.1 Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Complexity

LOW

Privileges

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Published: 4/9/2026Modified: 4/29/2026

Related Intelligence (0)

No articles currently reference this CVE.

References (5)

https://code-projects.org/https://github.com/lonelyuan/vunls/issues/7 https://vuldb.com/submit/788337 https://vuldb.com/vuln/356275 https://vuldb.com/vuln/356275/cti