GCVE - cpe:2.3:a:socialcodia:social_codia

Approved changes feed: RSS · Atom

cpe:2.3:a:socialcodia:social_codia_sms:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-27349`	vulnerable	2026-06-08 05:41:55.172870	Details available Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Published: 2022-04-08T08:23:38.000Z Updated: 2024-08-03T05:25:32.672Z Open on db.gcve.eu Reference links https://github.com/D4rkP0w4r/sms-Unrestricted-File-Upload-RCE-POC https://drive.google.com/file/d/10vgciE0FwkZpzLZf9JSGGyvq3hwehXMs/view?usp=sharing http://packetstormsecurity.com/files/166655/Social-Codia-SMS-1-Shell-Upload.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-27348`	vulnerable	2026-06-08 05:41:55.172454	Details available Social Codia SMS v1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field. Published: 2022-04-08T08:23:38.000Z Updated: 2024-08-03T05:25:32.700Z Open on db.gcve.eu Reference links https://github.com/D4rkP0w4r/sms-Add_Student-Stored_XSS-POC https://drive.google.com/file/d/1PLRmIi7EBMAXkLMUhUy09PVph1CW6otF/view?usp=sharing http://packetstormsecurity.com/files/166650/Social-Codia-SMS-1-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.