CVE-2022-30376

概要

参考情報

• k0xx11/bug_report · Exploit

simple social networking site のその他の脆弱性

• CVE-2022-30460中 5.4Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /sns/classes/Users.php?f=save, firstname.
• CVE-2022-30379高 7.2Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manage_user&id=.
• CVE-2022-30378高 7.2Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/view_post&id=.
• CVE-2022-30375中 6.5Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=delete_img.