CVE-2023-40172
- EPSS 0.06%
- Veröffentlicht 18.08.2023 22:15:11
- Zuletzt bearbeitet 21.11.2024 08:18:55
Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery (CSRF) attack is a type of malicious attack whereby an attacker tricks a victim into performing an ...
CVE-2023-40173
- EPSS 0.07%
- Veröffentlicht 18.08.2023 22:15:11
- Zuletzt bearbeitet 21.11.2024 08:18:55
Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking shou...
CVE-2023-40174
- EPSS 0.07%
- Veröffentlicht 18.08.2023 22:15:11
- Zuletzt bearbeitet 21.11.2024 08:18:55
Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly...
CVE-2023-39518
- EPSS 0.93%
- Veröffentlicht 08.08.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 08:15:35
social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored cross-site scripting vulnerability. The problem is patched in v1.0.3.
CVE-2023-39344
- EPSS 3.6%
- Veröffentlicht 04.08.2023 20:15:10
- Zuletzt bearbeitet 21.11.2024 08:15:11
social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION based injections, which indirectly leads to remote code execution. Commit 3cabdd35c3d874608883c9eaf9bf69b2014d25c1 contains a fix ...