Show filters
19 Total Results
Displaying 1-10 of 19
Sort by:
Attacker Value
Unknown
CVE-2023-45542
Disclosure Date: October 16, 2023 (last updated February 25, 2025)
Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q parameter in the Search function.
0
Attacker Value
Unknown
CVE-2023-44813
Disclosure Date: October 09, 2023 (last updated February 25, 2025)
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function.
0
Attacker Value
Unknown
CVE-2023-44812
Disclosure Date: October 09, 2023 (last updated February 25, 2025)
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the admin_redirect_url parameter of the user login function.
0
Attacker Value
Unknown
CVE-2023-44811
Disclosure Date: October 09, 2023 (last updated February 25, 2025)
Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the admin Password Change Function.
0
Attacker Value
Unknown
CVE-2023-43323
Disclosure Date: September 28, 2023 (last updated February 25, 2025)
mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].
0
Attacker Value
Unknown
CVE-2023-43325
Disclosure Date: September 26, 2023 (last updated February 25, 2025)
A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
0
Attacker Value
Unknown
CVE-2023-43326
Disclosure Date: September 25, 2023 (last updated February 25, 2025)
A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
0
Attacker Value
Unknown
CVE-2023-40869
Disclosure Date: September 14, 2023 (last updated February 25, 2025)
Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the edit_menu, copuon, and group_categorias functions.
0
Attacker Value
Unknown
CVE-2023-40868
Disclosure Date: September 14, 2023 (last updated February 25, 2025)
Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions.
0
Attacker Value
Unknown
CVE-2023-4175
Disclosure Date: August 06, 2023 (last updated February 25, 2025)
A vulnerability was found in mooSocial mooTravel 3.1.8 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-236210 is the identifier assigned to this vulnerability.
0
