6 matches found
WS-2023-0331
Session Fixation in fobybus/social-media-skeleton - Authenticating a user but failing to provision a new session identifier gives an attacker the opportunity to steal authenticated sessions of victim users. This attack breaks the data confidentiality and integrity of victim users...
CVE-2023-40173 Unsalted passwords in fobybus/social-media-skeleton
Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords...
WS-2023-0310
Insufficient Session Expiration in fobybus/social-media-skeleton...
WS-2023-0309
Weak Password Requirements in fobybus/social-media-skeleton...