KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php.
References
| Link | Resource |
|---|---|
| https://github.com/msaad1999/KLiK-SocialMediaWebsite/releases/tag/v1.0.1 | Release Notes Third Party Advisory |
| https://github.com/bypazs/CVE-2022-42098 | Exploit Third Party Advisory |
| https://grimthereaperteam.medium.com/cve-2022-42098-klik-sql-injection-6a9299621789 | Exploit Third Party Advisory |
| https://github.com/msaad1999/KLiK-SocialMediaWebsite | Product Third Party Advisory |
Advertisement
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-11-22 05:15
Updated : 2022-11-23 11:26
NVD link : CVE-2022-42098
Mitre link : CVE-2022-42098
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Advertisement
Products Affected
klik-socialmediawebsite_project
- klik-socialmediawebsite