Code-projects Social Networking Site vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Code-projects Social Networking Site: 3 record(s), with affected versions and fixes.
cpe:2.3:a:code-projects:social_networking_site

CVE-2026-4970 Medium · 6.3 CWE-74 Mar 27, 2026

code-projects Social Networking Site Endpoint delete_photos.php sql injection

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file delete_photos.php of the component Endpoint. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-4969 Low · 3.5 CWE-79 Mar 27, 2026

code-projects Social Networking Site Alert home.php cross site scripting

A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The manipulation of the argument content leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

CVE-2026-2083 Critical · 9.8 CWE-89 Feb 7, 2026

code-projects Social Networking Site 1.0 SQL Injection in delete_post.php

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /delete_post.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.