China National Vulnerability DatabaseCNVD-2022-86313KLiK SocialMediaWebsite SQL Injection Vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
KLiK SocialMediaWebsite is a simple PHP-based social media site from Muhammad Saad’s personal developer, KLiK SocialMediaWebsite v1.0.1 is vulnerable to a SQL injection vulnerability in “profile.php” due to a lack of validation of external input SQL statements. An attacker could exploit this vulnerability to obtain database information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| muhammad saad klik socialmediawebsite v | eq | 1.0.1 |
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H