Advisories · Technology

fobybus social-media-skeleton.

Every CVE that names fobybus social-media-skeleton among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-40172 CVE record

CVSS 6.5 Medium

Cross-Site Request Forgery (CSRF) in fobybus/social-media-skeleton
- fobybus social-media-skeleton
- Cross-site request forgery (CSRF)
Not analysed yet 18 Aug 2023
CVE-2023-40173 CVE record

CVSS 7.5 High

Unsalted passwords in fobybus/social-media-skeleton
- fobybus social-media-skeleton
- Hard-coded credentials
Not analysed yet 18 Aug 2023
CVE-2023-40174 CVE record

CVSS 6.8 Medium

Insufficient Session Expiration in fobybus/social-media-skeleton
- fobybus social-media-skeleton
- Authentication bypass
Not analysed yet 18 Aug 2023
CVE-2023-39518 CVE record

CVSS 5.4 Medium

social-media-skeleton stored Cross-site Scripting vulnerability
- fobybus social-media-skeleton
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-39344 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

social-media-skeleton vulnerable to Pre-Auth SQLi leading to RCE
- fobybus social-media-skeleton
- SQL injection
Not analysed yet 4 Aug 2023