Approved changes feed: RSS · Atom

cpe:2.3:a:klik_socialmediawebsite:klik_socialmediawebsite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKlik Socialmediawebsite (4603b787-270f-5c27-9239-4a47b4c52e13)
ProductKlik Socialmediawebsite (da77e166-0d64-51f9-8454-8125a98ab9ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9422 vulnerable 2026-06-08 08:08:58.956316 KLiK SocialMediaWebsite HTTP POST Request Parameter injection
HIGH (7.3)
A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler. Such manipulation leads to injection. The attack can be launched remotely. The exploit is publicly available and might be used.
Published: 2026-05-25T03:30:10.638Z
Updated: 2026-05-29T15:26:25.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9421 vulnerable 2026-06-08 08:08:58.956162 KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload
HIGH (7.3)
A vulnerability was determined in KLiK SocialMediaWebsite 1.0. This vulnerability affects the function uniqid of the file upload.inc.php of the component File Handler. This manipulation causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-05-25T03:15:09.867Z
Updated: 2026-05-26T14:40:40.482Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9420 vulnerable 2026-06-08 08:08:58.955906 KLiK SocialMediaWebsite HTTP GET Request Parameter injection
MEDIUM (6.3)
A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Published: 2026-05-25T03:00:12.536Z
Updated: 2026-05-26T14:21:42.039Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.