CVE-2022-34963

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...

CVE-2022-34963

The CVE-2022-34963 entry describes a stored cross-site scripting (XSS) vulnerability in Open Source Social Network (OSSN) v6.3 LTS, exposed via the News Feed module. The affected software is OSSN 6.3 LTS; root cause details are not explicitly provided beyond the stored XSS in News Feed. Exploit s...

CVE-2022-34965

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/cominstaller. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this ...

CVE-2022-34965

CVE-2022-34965 affects OpenTeknik OSSN Open Source Social Network v6.3 LTS. Affected component: /ossn/administrator/com_installer, where an arbitrary file upload allows execution of crafted PHP files. Privilege requirements: authenticated admin user; attack vector appears via web-exposed upload p...

CVE-2022-34965

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/cominstaller. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this ...

CVE-2022-34965

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/cominstaller. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this ...

PT-2022-22461 · Openteknik Llc · Openteknik Llc Ossn Open Source Social Network

Name of the Vulnerable Software and Affected Versions: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK version 6.3 LTS Description: The issue is related to an HTML injection vulnerability. This vulnerability can be exploited via the location parameter at the API endpoint "http://ip...

PT-2022-22458 · Openteknik Llc · Openteknik Llc Ossn Open Source Social Network

Name of the Vulnerable Software and Affected Versions: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK version 6.3 LTS Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is present in the Group Timeline module. Recommendations: For OpenTeknik L...

Open Source Social Network Encryption Problem Vulnerability

Open Source Social Network OSSN is a source social network engine by the Swiss Ossn team. An encryption vulnerability exists in OSSN 5.3 and earlier versions. The vulnerability can be exploited to read arbitrary files by performing a brute force attack on a SiteKey to insert a specially crafted U...

CVE-2020-10560

OSSN prior to 5.3 is vulnerable to an unauthenticated arbitrary file read. A user-controlled file path combined with a weak cryptographic SiteKey can be brute-forced to craft a URL that targets components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php, allowing reading arbitrary ...