Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-42098: Release Development Release · msaad1999/KLiK-SocialMediaWebsite

KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php.

CVE
#sql#web#windows#php

This release is meant for offline web development on localhost server. It still can function on live domains, but might run into potential problems in some rare cases.

Uses PHPMailer plugin to setup SMTP servers on localhost. This was essential for windows, but works on Unix Operation Systems as well.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda