CVE-2022-30379

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

CVE-2022-30375

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

CVE-2022-30379

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

Sql injection

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

Sql injection

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/viewpost&id=...

Sql injection

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/viewmember.php?id=...

Arbitrary file deletion

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

CVE-2022-30375

Vulnerability summary (CVE-2022-30375): affected product is Sourcecodester Simple Social Networking Site v1.0. The issue allows deletion of files via the endpoint /sns/classes/Master.php?f=delete_img, as described in multiple sources. The NVD entry lists CVSSv3.1 base score 6.5 (Network, Low atta...

CVE-2022-30375

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

CVE-2022-30376

CVE-2022-30376 affects Sourcecodester Simple Social Networking Site v1.0 and is vulnerable to SQL Injection via /sns/admin/members/view_member.php?id=. The CVE details note a SQL injection vulnerability with a CVSS2 base score of 6.5 (MEDIUM) and a CVSS3.1 base score of 7.2 (HIGH). The available ...

CVE-2022-30378

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/viewpost&id=...

CVE-2022-30378

CVE-2022-30378 affects Sourcecodester Simple Social Networking Site v1.0. The vulnerability is SQL injection via the parameter /sns/admin/?page=posts/view_post&id= in the web app. The CVSS information in the initial record indicates network access with low complexity and no authentication is requ...

CVE-2022-30379

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

CVE-2022-30379

CVE-2022-30379 affects Sourcecodester Simple Social Networking Site v1.0. The vulnerability is an SQL Injection in /sns/admin/?page=user/manage_user&id= where user-controlled input is not properly sanitized. This can lead to manipulation or disclosure of data as described by the CVE entry and rel...

Simple Social Networking Site SQL注入漏洞

Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /sns/admin/?page=user/manageuser&id=...

Simple Social Networking Site 安全漏洞

Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by an attacker to delete arbitrary files...

Clearview AI banned from selling facial recognition data in the US

Clearview AI, a facial recognition software and surveillance company, is permanently banned from selling its faceprint database within the United States. The company also cannot sell its database to state and law enforcement entities in Illinois for five years. This is a historic win for the...

Command injection

An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected Ping, Traceroute, and...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2022-1622)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2022-1599)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootpinput...