CVE-2023-40868

CVE-2023-40868 Vulnérabilité de falsification de requête intersite Cross-Site Request Forgery dans mooSocial MooSocial Software v.Demo permettant à un attaquant distant d'exécuter du code arbitraire via les fonctions Supprimer le compte et Désactiver. La vulnérabilité est une vulnérabilité de typ...

CVE-2023-40869

CVE-2023-40869 Vulnérabilité de Cross Site Scripting dans le logiciel mooSocial v3.1.6 et 3.1.7 permet à un attaquant distant d'exécuter du code arbitraire via un script malveillant dans les fonctions editmenu, copuon et groupcategorias XSS stocké via CSRF. Chemins affectés...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

Cross site scripting

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40868

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40869

mooSocial Software versions 3.1.6 and 3.1.7 are affected by a Cross Site Scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary code via crafted scripts targeting the edit_menu, copuon, and group_categorias functions. The CVE entry and Red Hat advisory corroborate the sa...

PT-2023-27679 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial MooSocial Software version Demo Description: The issue allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. This is a Cross Site Request Forgery vulnerability. Recommendations: For...