CVE-2025-62606

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a full compromise of the application's database, including reading, modifying, or deleting all data. This issue has been patched in version 2.5.12.

• CWE-89

• https://github.com/My-Little-Forum/mylittleforum/releases/tag/20251021.1
• https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-m8hj-c6gr-6h6v
• https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-m8hj-c6gr-6h6v

Published

Oct 22, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-62600eprosima Fast DDS is a C++ implementation of the DDS (Data D…7.5
• CVE-2025-62601Fast DDS is a C++ implementation of the DDS (Data Distributi…7.5
• CVE-2025-62602Fast DDS is a C++ implementation of the DDS (Data Distributi…7.5
• CVE-2025-62603Fast DDS is a C++ implementation of the DDS (Data Distributi…7.5
• CVE-2025-62604MeterSphere is an open source continuous testing platform. P…7.5
• CVE-2025-62605Mastodon is a free, open-source social network server based …4.3
• CVE-2025-62607Nautobot Single Source of Truth (SSoT) is an app for Nautobo…5.3
• CVE-2025-62608MLX is an array framework for machine learning on Apple sili…9.1
• CVE-2025-62609MLX is an array framework for machine learning on Apple sili…7.5
• CVE-2025-6261The Fleetwire Fleet Management plugin for WordPress is vulne…6.4
• CVE-2025-62610Hono is a Web application framework that provides support fo…8.1
• CVE-2025-62611aiomysql is a library for accessing a MySQL database from th…8.2