PT-2026-31559 · Unknown · Simple It Discussion Forum

Christychen11 · Published 2026-04-09 · Updated 2026-04-18 · CVE-2026-5827

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Simple IT Discussion Forum version 1.0

Description A SQL injection issue exists in Simple IT Discussion Forum version 1.0. The vulnerability is located in the /question-function.php file, within an unknown function. Manipulation of the content parameter can lead to SQL injection. The attack can be initiated remotely. The exploit has been publicly disclosed.

Recommendations Update to a newer version of Simple IT Discussion Forum that addresses this SQL injection issue. As a temporary workaround, restrict or carefully sanitize the content parameter in the /question-function.php file.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-5827

Affected Products

Simple It Discussion Forum

References · 11

• 🔥 https://github.com/lonelyuan/vunls/issues/8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5827 · Security Note
• https://vuldb.com/vuln/356274 · Note
• https://code-projects.org · Note
• https://twitter.com/VulmonFeeds/status/2042106057120469046 · Twitter Post
• https://vuldb.com/vuln/356274/cti · Note
• https://twitter.com/CVEnew/status/2042186499454861774 · Twitter Post
• https://twitter.com/CVEarity/status/2042286459475149106 · Twitter Post
• https://vuldb.com/submit/788336 · Note
• https://twitter.com/giuseppe_1337/status/2045327879311966302 · Twitter Post
• https://twitter.com/infoflowcloud/status/2042187831339081828 · Twitter Post