Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:social_networking_site:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSocial Networking Site (865ae07e-360a-5973-82a5-42bd8e079d72)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4970 vulnerable 2026-06-08 08:07:02.723137 code-projects Social Networking Site Endpoint delete_photos.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file delete_photos.php of the component Endpoint. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-27T18:24:14.173Z
Updated: 2026-03-30T19:02:33.126Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4969 vulnerable 2026-06-08 08:07:02.722760 code-projects Social Networking Site Alert home.php cross site scripting
LOW (3.5)
A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The manipulation of the argument content leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Published: 2026-03-27T18:24:11.735Z
Updated: 2026-03-31T13:42:07.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2083 vulnerable 2026-06-08 07:55:16.503296 code-projects Social Networking Site delete_post.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /delete_post.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-02-07T10:32:06.454Z
Updated: 2026-02-23T09:31:30.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0722 vulnerable 2026-06-08 06:22:01.992360 code-projects Social Networking Site Message Page message.php cross site scripting
LOW (3.5)
A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251546 is the identifier assigned to this vulnerability.
Published: 2024-01-19T16:31:03.774Z
Updated: 2025-06-17T21:19:24.719Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.