CVE-2022-42099

The CVE-2022-42099 entry concerns KLiK SocialMediaWebsite version 1.0.1 with stored XSS via the Forum Subject input. The root cause is an XSS vulnerability in the forum subject handling that allows injected script to be stored and later executed by other users. Impact is described as enabling sto...

CVE-2022-42100

CVE-2022-42100 affects KLiK SocialMediaWebsite version 1.0.1. The RedHat/EUVD/CNVD/etc. entries confirm a cross-site scripting (XSS) vulnerability in the reply-form where user-supplied data in the location input can be stored and rendered, due to insufficient input filtering/escaping. The issue i...

KLiK SocialMediaWebsite SQL Injection Vulnerability

KLiK SocialMediaWebsite is a simple PHP based social media website by Muhammad Saad personal developer. KLiK SocialMediaWebsite v1.0.1 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in "profile.php". The vulnerability can be...

CVE-2022-42098

KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php...

Sql injection

KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php...

CVE-2022-42098

KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php...

CVE-2022-42098

The CVE-2022-42098 entry concerns KLiK SocialMediaWebsite v1.0.1 with an SQL Injection vulnerability in profile.php caused by lack of validation of user-supplied SQL. The vulnerability can allow access to database information (high impact per CVSS) with network access and low privileges required;...

CVE-2022-42098

KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php...

CVE-2022-42098

KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php...

PT-2022-26249 · Unknown · Klik Socialmediawebsite

Name of the Vulnerable Software and Affected Versions: KLiK SocialMediaWebsite version v1.0.1 Description: The issue concerns SQL Injection via the profile.php file. Recommendations: For version v1.0.1, consider restricting access to the profile.php file until a patch is available. Avoid using...

KLiK Social Media Website 1.0 - Multiple SQL injection Vulnerability

Exploit Title: KLiK Social Media Website 1.0 - 'Multiple' SQLi Exploit Author: corpse Vendor Homepage: https://github.com/msaad1999/KLiK-SocialMediaWebsite Software Link: https://github.com/msaad1999/KLiK-SocialMediaWebsite Version: 1.0 Tested on: Debian 11 Parameter: poll GET Type: time-based...

klik-eat.com XSS vulnerability

Open Bug Bounty ID: OBB-642764 Description| Value ---|--- Affected Website:| klik-eat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

klik-info.nl Open Redirect vulnerability

Open Bug Bounty ID: OBB-633338 Description| Value ---|--- Affected Website:| klik-info.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...

klik-eat.com XSS vulnerability

Vulnerable URL: https://klik-eat.com/?action=search=="=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 207475 VIP website status:| No Check klik-eat.com SSL connection:| Grade: ...

Face.com Fixes Flaw to Prevent Facebook and Twitter Hijacks

A significant flaw in the Face.com mobile application KLIK has been fixed to prevent Facebook and Twitter users from having their accounts hijacked. KLIK is a camera app that uses face recognition to tag friends in Facebook photos in real time. It also apparently granted access to KLIK users’...