EUVD-2023-44777

Malicious code in bioql PyPI...

CVE-2023-40172 Cross-Site Request Forgery (CSRF) in fobybus/social-media-skeleton

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery CSRF attack is a type of malicious attack whereby an attacker tricks a victim into performing an action on a website that they do not intend to do...

CVE-2023-40172 Cross-Site Request Forgery (CSRF) in fobybus/social-media-skeleton

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery CSRF attack is a type of malicious attack whereby an attacker tricks a victim into performing an action on a website that they do not intend to do...

CVE-2023-40173 Unsalted passwords in fobybus/social-media-skeleton

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords...

CVE-2023-40174 Insufficient Session Expiration in fobybus/social-media-skeleton

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Soci...

CVE-2023-40174 Insufficient Session Expiration in fobybus/social-media-skeleton

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Soci...

social-media-skeleton 安全漏洞

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer of fobybus. A security vulnerability exists in social-media-skeleton prior to version 1.0.5, which stems from validating password policies only on the client-side...

social-media-skeleton 跨站请求伪造漏洞

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A cross-site request forgery vulnerability exists in social-media-skeleton versions prior to 1.0.5, which stems from the presence of a cross-site request...

PT-2023-27306 · Unknown · Social Media Skeleton

Name of the Vulnerable Software and Affected Versions: Social media skeleton versions prior to 1.0.5 Description: Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. This issue...

social-media-skeleton 代码问题漏洞

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A code issue vulnerability exists in social-media-skeleton versions prior to 1.0.5, which stems from not properly limiting the lifecycle of a user's sessio...

social-media-skeleton Cross-Site Scripting Vulnerability

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A cross-site scripting vulnerability exists in social-media-skeleton versions 1.0.0 through 1.0.3, which stems from the presence of a stored cross-site...

social-media-skeleton SQL Injection Vulnerability

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A SQL injection vulnerability exists in social-media-skeleton, which stems from the presence of a UNION-based SQL injection vulnerability...