Lucene search
+L

75 matches found

CNNVD
CNNVD
added 2026/05/25 12:00 a.m.17 views

KLiK SocialMediaWebsite 安全漏洞

KLiK SocialMediaWebsite is a simple PHP-based social media website by the individual developer Muhammad Saad. A security vulnerability exists in KLiK SocialMediaWebsite version 1.0, which originates in the HTTP POST Request Parameter Handler component and could lead to injection...

7.5CVSS7.2AI score0.00304EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.67 views

KLiK SocialMediaWebsite 代码问题漏洞

KLiK SocialMediaWebsite is a simple PHP-based social media website by the individual developer Muhammad Saad. A code issue vulnerability exists in version 1.0 of KLiK SocialMediaWebsite, which stems from the File Handler component's manipulation of the function uniqid in the file upload.inc.php,...

7.5CVSS7.1AI score0.00293EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.16 views

KLiK SocialMediaWebsite 安全漏洞

KLiK SocialMediaWebsite is a simple PHP-based social media website by the individual developer Muhammad Saad. A security vulnerability exists in KLiK SocialMediaWebsite version 1.0, which originates from the HTTP GET Request Parameter Handler component and could lead to injection...

7.5CVSS6.6AI score0.00242EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.34 views

PT-2026-43000

A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler. Such manipulation leads to injection. The attack can be launched remotely. The exploit is publicly available and might be used...

7.5CVSS7AI score0.00304EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.27 views

PT-2026-42999

A vulnerability was determined in KLiK SocialMediaWebsite 1.0. This vulnerability affects the function uniqid of the file upload.inc.php of the component File Handler. This manipulation causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and m...

7.5CVSS6.8AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.28 views

PT-2026-42998

A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used...

7.5CVSS6.3AI score0.00242EPSS
SaveExploits0References6
NVD
NVD
added 2026/04/25 10:16 p.m.18 views

CVE-2026-7002

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...

7.5CVSS0.00246EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/25 9:30 p.m.47 views

CVE-2026-7002 KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...

7.5CVSS0.00246EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/25 9:30 p.m.7 views

CVE-2026-7002

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...

7.5CVSS5.3AI score0.00246EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/04/25 9:30 p.m.34 views

CVE-2026-7002

CVE-2026-7002 affects KLiK SocialMediaWebsite (versions up to 1.0.1). The vulnerability exists in /includes/get_message_ajax.php within the Private Message Handler; manipulating the c_id argument permits SQL injection, exploitable remotely over a network. CVSS data indicate high severity (3.1: sc...

7.5CVSS7.3AI score0.00246EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/25 9:30 p.m.12 views

EUVD-2026-25677

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...

7.5CVSS7.3AI score0.00246EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/25 12:00 a.m.16 views

PT-2026-35177

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/get message ajax.php of the component Private Message Handler. Executing a manipulation of the argument c id can lead to sql injection. It is possible to launch the...

7.5CVSS7.2AI score0.00246EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/25 12:00 a.m.17 views

KLiK SocialMediaWebsite 注入漏洞

KLiK SocialMediaWebsite is a simple social media website developed by Muhammad Saad using PHP. Versions of KLiK SocialMediaWebsite 1.0.1 and earlier had a vulnerability related to injection attacks. This vulnerability stemmed from the cid parameter operations in the Private Message Handler...

7.5CVSS7.2AI score0.00246EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 10:52 a.m.11 views

CVE-2022-42098

KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php...

8.8CVSS8AI score0.01269EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:52 a.m.13 views

CVE-2022-42100

KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form...

5.4CVSS6AI score0.00491EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:51 a.m.11 views

CVE-2022-42099

KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subject input...

5.4CVSS6AI score0.00491EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2022-45186

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00491EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2022-45184

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01269EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-45185

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00491EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:53 a.m.15 views

CVE-2024-26472

KLiK SocialMediaWebsite version 1.0.1 from msaad1999 has a reflected cross-site scripting XSS vulnerability which may allow remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' or 'validator' parameters of...

6.1CVSS6.1AI score0.00549EPSS
SaveExploits0References1
Rows per page
Query Builder