72 matches found
Biobook Social Networking Site 1.0 Arbitrary File Upload
============================================================================================================================================= | Title : biobook Social Networking Site 1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...
Social Networking Site Cross-Site Scripting Vulnerability
Social Networking Site is a social networking site. A cross-site scripting vulnerability exists in version 1.0 of Social Networking Site, which stems from the lack of effective filtering and escaping of user-supplied data in the message.php parameter Story, and can be exploited to execute arbitra...
CVE-2024-0722
A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cross site scripting. The attack may be...
CVE-2024-0722
A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cross site scripting. The attack may be...
Cross site scripting
A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cross site scripting. The attack may be...
CVE-2024-0722 code-projects Social Networking Site Message Page message.php cross site scripting
A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cross site scripting. The attack may be...
CVE-2024-0722
CVE-2024-0722 concerns code-projects Social Networking Site 1.0, where the vulnerability resides in the message.php component of the Message Page. The issue arises from manipulating the Story argument, enabling cross-site scripting (XSS). Documents consistently state the vulnerability can be expl...
Simple Social Networking Site 跨站脚本漏洞
Social Networking Site is a social networking site. A cross-site scripting vulnerability exists in version 1.0 of Social Networking Site, which stems from the lack of effective filtering and escaping of user-supplied data in the message.php parameter Story, and can be exploited to execute arbitra...
CVE-2022-30460
Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...
CVE-2022-30460
Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...
CVE-2022-30460
CVE-2022-30460 affects Simple Social Networking Site v1.0. A stored XSS flaw arises in the /sns/classes/Users.php?f=save endpoint via the firstname parameter. The CNNVD entry explicitly calls it stored XSS; CVSS metrics (NVD) show base scores of 3.5 (v2.0) / 5.4 (v3.1), indicating a low to medium...
Simple Social Networking Site 跨站脚本漏洞
Simple Social Networking Site is a social networking site by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Simple Social Networking Site, which originates from a /sns/classes/Users.php?f=save, firstname stored cross-site scripting XSS attack...
Simple Social Networking Site SQL Injection Vulnerability (CNVD-2022-40284)
Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /sns/admin/?page=user/manageuser&id=...
CVE-2022-30378
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/viewpost&id=...
CVE-2022-30376
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/viewmember.php?id=...
CVE-2022-30379
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...
CVE-2022-30375
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...
CVE-2022-30379
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...