ByteOS Network

NVD Vulnerability Details :

CVE-2025-62606

Awaiting Analysis

Source-security-advisories@github.com

Published At-22 Oct, 2025 | 15:16

Updated At-22 Oct, 2025 | 21:12

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a full compromise of the application's database, including reading, modifying, or deleting all data. This issue has been patched in version 2.5.12.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE ID	Type	Source
CWE-89	Secondary	security-advisories@github.com

CWE ID: CWE-89

Type: Secondary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/My-Little-Forum/mylittleforum/releases/tag/20251021.1	security-advisories@github.com	N/A
https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-m8hj-c6gr-6h6v	security-advisories@github.com	N/A
https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-m8hj-c6gr-6h6v	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A