CVE-2022-34965

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/com_installer. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this is intended behavior of the application as it only allows authenticated admins to upload files.

• CWE-434
• CWE-434

• https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3Release Notes, Third Party Advisory
• https://grimthereaperteam.medium.com/cve-2022-34965-open-source-social-network-6-3-3f61db82880Exploit, Third Party Advisory
• https://www.opensource-socialnetwork.org/Vendor Advisory
• https://www.openteknik.com/contact?channel=ossnVendor Advisory
• https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3Release Notes, Third Party Advisory
• https://grimthereaperteam.medium.com/cve-2022-34965-open-source-social-network-6-3-3f61db82880Exploit, Third Party Advisory
• https://www.opensource-socialnetwork.org/Vendor Advisory
• https://www.openteknik.com/contact?channel=ossnVendor Advisory

Published

Jul 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3496A vulnerability was found in SourceCodester Human Resource M…8.8
• CVE-2022-34960The container package in MikroTik RouterOS 7.4beta4 allows a…9.8
• CVE-2022-34961OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was …5.4
• CVE-2022-34962OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was …5.4
• CVE-2022-34963OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was …5.4
• CVE-2022-34964OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was …4.8
• CVE-2022-34966OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was …7.5
• CVE-2022-34967The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Datab…7.5
• CVE-2022-34968An issue in the fetch_step function in Percona Server for My…7.5
• CVE-2022-34969PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer…7.5
• CVE-2022-3497A vulnerability was found in SourceCodester Human Resource M…5.4
• CVE-2022-34970Crow before 1.0+4 has a heap-based buffer overflow via the f…9.8