PackagesGitHubopensource-socialnetwork/opensource-socialnetwork

opensource-socialnetwork/opensource-socialnetwork

github.com

www.opensource-socialnetwork.org

Package Statistics

16 releases

2 months 3 weeks between releases

last release was 8 months ago

last checked less than a minute ago

1083

Open Source Social Network (OSSN) is a social networking software written in PHP. It allows you to make a social networking website and helps your members build social relationships, with people who share similar professional or personal interests. It is available in 17 international languages.

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2022-34966	Jul 25, 2022	7.5 HIGH	N/A
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ip_address/:port/ossn/home.
CVE-2022-34962	Jul 25, 2022	5.4 MEDIUM	N/A
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module.
CVE-2022-34965	Jul 25, 2022	7.2 HIGH	N/A
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/com_installer. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this is intended behavior of the application as it only allows authenticated admins to upload files.
CVE-2022-34961	Jul 25, 2022	5.4 MEDIUM	N/A
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Users Timeline module.
CVE-2022-34963	Jul 25, 2022	5.4 MEDIUM	N/A
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the News Feed module.
CVE-2022-34964	Jul 25, 2022	4.8 MEDIUM	N/A
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the SitePages module.