Vendor
opensource-socialnetwork
3 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 5.3
Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes
Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUI…
-
Medium 6.5
Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route
Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows authenticated users to read other users' private message attachments. Attackers can request the /mess…