CVE-2023-40868

CVE-2023-40868 Vulnerabilidad de Cross Site Request Forgery en mooSocial MooSocial Software v.Demo permite a un atacante remoto ejecutar código arbitrario mediante las funciones Eliminar Cuenta y Desactivar. La vulnerabilidad es una vulnerabilidad de Cross-Site Request Forgery CSRF en la aplicaci...

CVE-2023-40869

CVE-2023-40869 Vulnerabilidad de Cross Site Scripting en mooSocial Software v.3.1.6 y 3.1.7 permite a un atacante remoto ejecutar código arbitrario a través de un script manipulado en las funciones editmenu, copuon y groupcategorias XSS almacenado vía CSRF. Rutas Afectadas...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

Cross site scripting

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

PT-2023-27679 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial MooSocial Software version Demo Description: The issue allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. This is a Cross Site Request Forgery vulnerability. Recommendations: For...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

CVE-2023-40869

mooSocial Software versions 3.1.6 and 3.1.7 are affected by a Cross Site Scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary code via crafted scripts targeting the edit_menu, copuon, and group_categorias functions. The CVE entry and Red Hat advisory corroborate the sa...