Filtered by vendor Fobybus
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-39518 | 1 Fobybus | 1 Social-media-skeleton | 2024-11-21 | N/A | 5.4 MEDIUM |
social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored cross-site scripting vulnerability. The problem is patched in v1.0.3. | |||||
CVE-2023-39344 | 1 Fobybus | 1 Social-media-skeleton | 2024-11-21 | N/A | 10.0 CRITICAL |
social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION based injections, which indirectly leads to remote code execution. Commit 3cabdd35c3d874608883c9eaf9bf69b2014d25c1 contains a fix for this issue. |