CVE-2023-40868

CVE-2023-40868 mooSocial MooSocial Software v.Demo의 CSRFCross Site Request Forgery 취약점으로, 원격 공격자가 Delete Account 및 Deactivate 기능을 통해 임의 코드를 실행할 수 있습니다. 이 취약점은 mooSocial MooSocial Software v.Demo 애플리케이션의 CSRFCross-Site Request Forgery 취약점입니다. CSRF 취약점은 악의적인 공격자가 피해자를 속여 의도하지 않은 작업을 수행하게 할 때 발생합니다....

CVE-2023-40869

CVE-2023-40869 Уязвимость межсайтового скриптинга в mooSocial mooSocial Software v.3.1.6 и 3.1.7 позволяет удаленному атакующему выполнить произвольный код через манипуляцию функциями editmenu, copuon и groupcategorias XSS STORE через CSRF. Пострадавшие пути...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

Cross site scripting

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

PT-2023-27679 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial MooSocial Software version Demo Description: The issue allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. This is a Cross Site Request Forgery vulnerability. Recommendations: For...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40869

mooSocial Software versions 3.1.6 and 3.1.7 are affected by a Cross Site Scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary code via crafted scripts targeting the edit_menu, copuon, and group_categorias functions. The CVE entry and Red Hat advisory corroborate the sa...