CVE-2022-30376

CVE-2022-30376 affects Sourcecodester Simple Social Networking Site v1.0 and is vulnerable to SQL Injection via /sns/admin/members/view_member.php?id=. The CVE details note a SQL injection vulnerability with a CVSS2 base score of 6.5 (MEDIUM) and a CVSS3.1 base score of 7.2 (HIGH). The available ...

CVE-2022-30378

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/viewpost&id=...

CVE-2022-30378

CVE-2022-30378 affects Sourcecodester Simple Social Networking Site v1.0. The vulnerability is SQL injection via the parameter /sns/admin/?page=posts/view_post&id= in the web app. The CVSS information in the initial record indicates network access with low complexity and no authentication is requ...

CVE-2022-30379

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

CVE-2022-30379

CVE-2022-30379 affects Sourcecodester Simple Social Networking Site v1.0. The vulnerability is an SQL Injection in /sns/admin/?page=user/manage_user&id= where user-controlled input is not properly sanitized. This can lead to manipulation or disclosure of data as described by the CVE entry and rel...

PT-2022-20082

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue allows for SQL Injection via the "/sns/admin/?page=posts/view post&id=" API endpoint, specifically targeting the id variable. This could potentially lead to...

Simple Social Networking Site 安全漏洞

Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by an attacker to delete arbitrary files...

CVE-2022-30375: Incorrect Default Permissions

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

PT-2022-20083

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /sns/admin/?page=user/manage user&id= endpoint. The id parameter is vulnerable to injection attacks. Thi...

CVE-2022-30376: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/viewmember.php?id=...

CVE-2022-30379: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

PT-2022-20080

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue allows for file deletion via the /sns/classes/Master.php?f=delete img API endpoint. This endpoint is vulnerable to exploitation, potentially leading to unauthorized...

PT-2022-20081

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue concerns SQL Injection via the /sns/admin/members/view member.php?id= endpoint. This allows for potential exploitation by injecting malicious SQL code through the i...

Simple Social Networking Site SQL注入漏洞

Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /sns/admin/?page=user/manageuser&id=...

CVE-2022-30378: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/viewpost&id=...

Clearview AI banned from selling facial recognition data in the US

Clearview AI, a facial recognition software and surveillance company, is permanently banned from selling its faceprint database within the United States. The company also cannot sell its database to state and law enforcement entities in Illinois for five years. This is a historic win for the...

Elon Musk Wants to Make Twitter DMs End-to-End Encrypted

By Deeba Ahmed The CEO of SpaceX and Tesla and the new owner of microblogging and social networking giant Twitter seem… This is a post from HackRead.com Read the original post: Elon Musk Wants to Make Twitter DMs End-to-End Encrypted...

Keybase path traversal vulnerability

Keybase is a PGP technology-based social networking platform that supports end-to-end encryption.Keybase Client for Windows prior to version 5.7.0 is vulnerable to a path traversal vulnerability that stems from a networked system or product failing to properly filter special elements in a resourc...

Mahara Cross-Site Scripting Vulnerability (CNVD-2021-103377)

Mahara is a social networking system owned by Catalyst IT in New Zealand. Mahara is vulnerable to cross-site scripting attacks via the \SCRIPT\ element...

Mahara Path Traversal Vulnerability

Mahara is a social networking system. The system includes a blog, resume builder, file manager, and more. Mahara suffers from a security vulnerability that allows an attacker to bypass the intended access control on HTML files through directory traversal...