CVE-2026-9421
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
In KLiK SocialMediaWebsite 1.0, the uniqid function in upload.inc.php allows unrestricted file upload. The attack can be performed remotely, and the exploit is publicly available.
Risk Assessment
An attacker can upload malicious files to the server, potentially leading to application compromise or data leakage.
Recommendation
Update the software to the latest version or implement file type and size validation mechanisms.
Other vulnerabilities in KLiK SocialMediaWebsite
See all- CVE-2026-9422High
In KLiK SocialMediaWebsite 1.0, an injection vulnerability exists in the HTTP POST request parameter handler. The attack can be launched remotely and the exploit is publicly available.
- CVE-2026-9420Medium
A vulnerability was found in KLiK SocialMediaWebsite 1.0 in the HTTP GET Request Parameter Handler component. Manipulation leads to injection.
Original NVD description (English source)
A vulnerability was determined in KLiK SocialMediaWebsite 1.0. This vulnerability affects the function uniqid of the file upload.inc.php of the component File Handler. This manipulation causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.