{"api_version":"1","generated_at":"2026-07-24T20:42:10+00:00","cve":"CVE-2015-1475","urls":{"html":"https://cve.report/CVE-2015-1475","api":"https://cve.report/api/cve/CVE-2015-1475.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-1475","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-1475"},"summary":{"title":"CVE-2015-1475","description":"Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or (b) forum_entry.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2015-02-04 16:59:04","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100616","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100616","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2015/Feb/15","name":"http://seclists.org/fulldisclosure/2015/Feb/15","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Full Disclosure: My Little Forum Multiple XSS Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2-1.7-Cross-Site-Scripting.html","name":"http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2-1.7-Cross-Site-Scripting.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"My Little Forum 2.3.3 / 2.2 / 1.7 Cross Site Scripting ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://tetraph.com/security/xss-vulnerability/my-little-forum-multiple-xss-security-vulnerabilities/","name":"http://tetraph.com/security/xss-vulnerability/my-little-forum-multiple-xss-security-vulnerabilities/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CVE-2015-1475 – My Little Forum Multiple XSS Security Vulnerabilities – Information Security - Tetraph","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1475","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1475","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"1475","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mylittleforum","cpe5":"my_little_forum","cpe6":"1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1475","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mylittleforum","cpe5":"my_little_forum","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1475","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mylittleforum","cpe5":"my_little_forum","cpe6":"2.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T04:47:15.929Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://tetraph.com/security/xss-vulnerability/my-little-forum-multiple-xss-security-vulnerabilities/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2-1.7-Cross-Site-Scripting.html"},{"name":"20150203 My Little Forum Multiple XSS Security Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2015/Feb/15"},{"name":"mylittleforum-multiple-xss(100616)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100616"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-02-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or (b) forum_entry.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-07T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://tetraph.com/security/xss-vulnerability/my-little-forum-multiple-xss-security-vulnerabilities/"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2-1.7-Cross-Site-Scripting.html"},{"name":"20150203 My Little Forum Multiple XSS Security Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2015/Feb/15"},{"name":"mylittleforum-multiple-xss(100616)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100616"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2015-1475","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or (b) forum_entry.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://tetraph.com/security/xss-vulnerability/my-little-forum-multiple-xss-security-vulnerabilities/","refsource":"MISC","url":"http://tetraph.com/security/xss-vulnerability/my-little-forum-multiple-xss-security-vulnerabilities/"},{"name":"http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2-1.7-Cross-Site-Scripting.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2-1.7-Cross-Site-Scripting.html"},{"name":"20150203 My Little Forum Multiple XSS Security Vulnerabilities","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2015/Feb/15"},{"name":"mylittleforum-multiple-xss(100616)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100616"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2015-1475","datePublished":"2015-02-04T16:00:00.000Z","dateReserved":"2015-02-04T00:00:00.000Z","dateUpdated":"2024-08-06T04:47:15.929Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-02-04 16:59:04","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mylittleforum:my_little_forum:1.7:*:*:*:*:*:*:*","matchCriteriaId":"749B315B-7080-4D66-A81C-7D970AB67EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mylittleforum:my_little_forum:2.2:*:*:*:*:*:*:*","matchCriteriaId":"DB8A29FA-6B28-49BB-9F29-5964A540B08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mylittleforum:my_little_forum:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"12ADFA95-7868-4025-9B84-B5EAF0A0BA7A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"1475","Ordinal":"1","Title":"CVE-2015-1475","CVE":"CVE-2015-1475","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"1475","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or (b) forum_entry.php.","Type":"Description","Title":"CVE-2015-1475"},{"CveYear":"2015","CveId":"1475","Ordinal":"2","NoteData":"2015-02-04","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"1475","Ordinal":"3","NoteData":"2017-09-07","Type":"Other","Title":"Modified"}]}}}