CVE-2022-30375

Vulnerability summary (CVE-2022-30375): affected product is Sourcecodester Simple Social Networking Site v1.0. The issue allows deletion of files via the endpoint /sns/classes/Master.php?f=delete_img, as described in multiple sources. The NVD entry lists CVSSv3.1 base score 6.5 (Network, Low atta...

CVE-2022-30378

CVE-2022-30378 affects Sourcecodester Simple Social Networking Site v1.0. The vulnerability is SQL injection via the parameter /sns/admin/?page=posts/view_post&id= in the web app. The CVSS information in the initial record indicates network access with low complexity and no authentication is requ...

CVE-2022-30376

CVE-2022-30376 affects Sourcecodester Simple Social Networking Site v1.0 and is vulnerable to SQL Injection via /sns/admin/members/view_member.php?id=. The CVE details note a SQL injection vulnerability with a CVSS2 base score of 6.5 (MEDIUM) and a CVSS3.1 base score of 7.2 (HIGH). The available ...

CVE-2022-30379

CVE-2022-30379 affects Sourcecodester Simple Social Networking Site v1.0. The vulnerability is an SQL Injection in /sns/admin/?page=user/manage_user&id= where user-controlled input is not properly sanitized. This can lead to manipulation or disclosure of data as described by the CVE entry and rel...

CVE-2022-30460

CVE-2022-30460 affects Simple Social Networking Site v1.0. A stored XSS flaw arises in the /sns/classes/Users.php?f=save endpoint via the firstname parameter. The CNNVD entry explicitly calls it stored XSS; CVSS metrics (NVD) show base scores of 3.5 (v2.0) / 5.4 (v3.1), indicating a low to medium...