{"id":"CVE-2026-9421","state":"PUBLISHED","title":"KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload","description":"A vulnerability was determined in KLiK SocialMediaWebsite 1.0. This vulnerability affects the function uniqid of the file upload.inc.php of the component File Handler. This manipulation causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.","publishedAt":"2026-05-25T03:15:09.867Z","updatedAt":"2026-05-26T14:40:40.482Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["n/a KLiK SocialMediaWebsite"],"affected":[{"vendor":"n/a","product":"KLiK SocialMediaWebsite","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:klik_socialmediawebsite:klik_socialmediawebsite:*:*:*:*:*:*:*:*"],"modules":["File Handler"]}],"references":["https://vuldb.com/vuln/365402","https://vuldb.com/vuln/365402/cti","https://vuldb.com/submit/813725"],"weaknesses":["CWE-434","CWE-284"],"ingestedAt":"2026-10-29T20:13:52.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/9xxx/CVE-2026-9421.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-9421","state":"PUBLISHED","datePublished":"2026-05-25T03:15:09.867Z","dateUpdated":"2026-05-26T14:40:40.482Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-24T06:52:00.508Z"},"containers":{"cna":{"title":"KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload","descriptions":[{"lang":"en","value":"A vulnerability was determined in KLiK SocialMediaWebsite 1.0. This vulnerability affects the function uniqid of the file upload.inc.php of the component File Handler. This manipulation causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized."}],"affected":[{"vendor":"n/a","product":"KLiK SocialMediaWebsite","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:klik_socialmediawebsite:klik_socialmediawebsite:*:*:*:*:*:*:*:*"],"modules":["File Handler"]}],"references":[{"url":"https://vuldb.com/vuln/365402","name":"VDB-365402 | KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/365402/cti","name":"VDB-365402 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/813725","name":"Submit #813725 | SourceCodester SourceCodester KLiK Social Media Website v1.0.1 Unrestricted Upload","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-434","type":"CWE","lang":"en","description":"Unrestricted Upload"}]},{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"Improper Access Controls"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-25T03:15:09.867Z"},"timeline":[{"time":"2026-05-24T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-24T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-24T08:57:24.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"g111 (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB Vulnerability Moderation Team","type":"coordinator"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-26T14:40:30.863049Z","id":"CVE-2026-9421","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-26T14:40:40.482Z"}}]}}}