Fobybus Social-media-skeleton 1.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:fobybus:social-media-skeleton:1.0.0:*:*:*:*:*:*:*
part: a version: 1.0.0 update: *
| Vendor | Fobybus (72b3bfda-3173-59bf-95c3-ce55f5767e98) |
|---|---|
| Product | Social Media Skeleton (92b6cb32-23e4-595e-a84c-5eaa7faf9444) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fobybus/social-media-skeleton |
purl2cpe | 2026-06-01 10:16:15.191828 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39344 |
vulnerable | 2026-06-08 06:09:37.162650 |
social-media-skeleton vulnerable to Pre-Auth SQLi leading to RCE
CRITICAL (10)
social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION based injections, which indirectly leads to remote code execution. Commit 3cabdd35c3d874608883c9eaf9bf69b2014d25c1 contains a fix for this issue.
Published: 2023-08-04T19:49:19.948Z
Updated: 2024-10-04T19:37:11.953Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.