VYPR
← All advisories
High severity8.8OSV Advisory· Published Oct 22, 2025· Updated Apr 15, 2026

CVE-2025-62606

CVE-2025-62606

Description

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a full compromise of the application's database, including reading, modifying, or deleting all data. This issue has been patched in version 2.5.12.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • My Little Forum/MylittleforumOSV3 versions
    2.3.99.3, 2.4, 2.4.1, …+ 2 more
    • (no CPE)range: 2.3.99.3, 2.4, 2.4.1, …
    • (no CPE)range: <2.5.12
    • (no CPE)range: <20251021.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.