CVE-2024-1028

CVE-2024-1028 affects SourceCodester Facebook News Feed Like 1.0. The vulnerability lies in the Post Handler’s Description argument, where input such as HACKED triggers cross-site scripting. Exploitation is reported to be remotely possible and the exploit has been disclosed publicly (VDB-252301)....

CVE-2024-1024

CVE-2024-1024 affects SourceCodester Facebook News Feed Like 1.0, specifically the New Account Handler component. The vulnerability is a cross-site scripting flaw triggered by unvalidated input in the First Name/Last Name field (example payload: ), allowing remote initiation. Multiple sources cor...

CVE-2024-5384

SourceCodester Facebook News Feed Like 1.0 is affected by CVE-2024-5384 due to unsanitized manipulation of the page parameter in index.php, enabling SQL injection. The issue can be exploited remotely over network with no authentication. Exploitation details beyond this are not provided in the con...

CVE-2024-1027

CVE-2024-1027 is a vulnerability in the Post Handler of SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function in Post Handler, with an unrestricted file upload vulnerability that can be exploited remotely. Multiple connected sources corroborate the issue, describing a critic...