Vulnerabilities

TI-2022-12640 CVE-2022-30460 · GHSA-qqwr-jcm9-xc3r

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting (XSS) via…

LOW 25

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /sns/classes/Users.php?f=save, firstname.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2022-05-24 No fix listed CWE-79

TI-2022-12592 CVE-2022-30375 · GHSA-q8hg-j49h-76vp

LOW 30

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=delete_img.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0087 Published 2022-05-13 No fix listed CWE-276

TI-2022-12593 CVE-2022-30376 · GHSA-gpjp-75m3-69m6

LOW 34

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/view_member.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-05-13 No fix listed CWE-89

TI-2022-12594 CVE-2022-30378 · GHSA-pm7m-jm2q-c9x9

LOW 34

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/view_post&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-05-13 No fix listed CWE-89

TI-2022-12595 CVE-2022-30379 · GHSA-mg3g-h8v5-hcgc

LOW 34

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manage_user&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-05-13 No fix listed CWE-89