social-media-skeleton Cross-Site Scripting Vulnerability

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A cross-site scripting vulnerability exists in social-media-skeleton versions 1.0.0 through 1.0.3, which stems from the presence of a stored cross-site...

CVE-2023-39518: Improper Neutralization of Input During Web Page Generation

social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored cross-site scripting vulnerability. The problem is patched in v1.0.3...

WS-2023-0287

Pre-Auth SQLi leading to RCE in Social Media Skeleton in GitHub repository fobybus/social-media-skeleton prior to 1.0.1...

CVE-2023-39344

social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION based injections, which indirectly leads to remote code execution. Commit 3cabdd35c3d874608883c9eaf9bf69b2014d25c1 contains a fix for this issue...

social-media-skeleton SQL Injection Vulnerability

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A SQL injection vulnerability exists in social-media-skeleton, which stems from the presence of a UNION-based SQL injection vulnerability...

CVE-2023-39344: Improper Neutralization of Special Elements used in an SQL Command

social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION based injections, which indirectly leads to remote code execution. Commit 3cabdd35c3d874608883c9eaf9bf69b2014d25c1 contains a fix for this issue...

PT-2023-26891

Name of the Vulnerable Software and Affected Versions social-media-skeleton affected versions not specified Description The issue is related to a SQL injection vulnerability in the social-media-skeleton project, which allows UNION based injections and can indirectly lead to remote code execution...

Cross-site Scripting (XSS)

uvdesk/community-skeleton is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library does not properly validate the user-supplied input before being rendered, allowing an attacker to inject and execute malicious JavaScript in the browser...

uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

GHSA-HFXP-J95J-CWRP uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-1197

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

community-skeleton 跨站脚本漏洞

community-skeleton is a service-oriented, event-driven, extensible open source helpdesk system. A cross-site scripting vulnerability exists in community-skeleton versions prior to 1.1.0. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

PT-2023-16813 · Unknown · Uvdesk Community Skeleton

Name of the Vulnerable Software and Affected Versions: uvdesk/community-skeleton versions prior to 1.1.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation or escaping, allowing...

CVE-2023-1197: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-1197 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-1197 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-1197 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-1197

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-1197

CVE-2023-1197 is a Stored XSS vulnerability in uvdesk/community-skeleton prior to 1.1.0. Multiple sources describe the issue as a Stored XSS affecting the UVDesk Community Skeleton web app, with exploitation tied to storing and displaying unvalidated user input. The commonly cited remediation is ...