Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10586 State: PUBLISHED Published: 2024-11-09T02:32:01.177Z Last Updated: 2024-11-12T18:45:50.488Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: eugenbobrowski Products: Debug Tool Problem Types: CWE-862 Description: The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
.php files that can be leveraged for remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5e9d5c93-dcd7-450e-8c52-5c95fc5473d2?source=cve - https://plugins.trac.wordpress.org/browser/debug-tool/trunk/tools/image-puller.php#L120
CVE ID: CVE-2024-10587 State: PUBLISHED Published: 2024-12-04T02:40:25.489Z Last Updated: 2024-12-04T14:47:15.532Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: funnelforms Products: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free Problem Types: CWE-502 Description: The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4.1 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a P
rusted input. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/701e6afe-08fa-49c7-a6da-cb266db07c48?source=cve - https://wordpress.org/plugins/funnelforms-free/
CVE ID: CVE-2024-10588 State: PUBLISHED Published: 2024-11-09T02:31:59.749Z Last Updated: 2024-11-12T20:16:06.212Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: eugenbobrowski Products: Debug Tool Problem Types: CWE-862 Description: The Debug Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the info() function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to obtain information from phpinfo(). When WP_DEBUG is enabled, this can be exploited by unauthenticated users as well. Additional Analyst Notes: - CISA ADP V
When WP_DEBUG is enabled, this can be exploited by unauthenticated users as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1b01991c-de16-43c4-bb11-c8730230ce51?source=cve - https://plugins.trac.wordpress.org/browser/debug-tool/trunk/tools/phpinfo.php#L43
CVE ID: CVE-2024-10589 State: PUBLISHED Published: 2024-11-09T07:35:06.694Z Last Updated: 2024-11-12T18:33:39.609Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: nouthemes Products: Leopard - WordPress Offload Media Problem Types: CWE-862 Description: The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the import_settings() function in all versions up to, and including, 3.1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This ca
henticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c0b50597-18c1-4cbc-aebb-348f4d786ad9?source=cve - https://codecanyon.net/item/leopard-wordpress-offload-media/23728788
CVE ID: CVE-2024-10590 State: PUBLISHED Published: 2024-12-12T04:23:11.367Z Last Updated: 2024-12-12T15:47:19.384Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: halfdata Products: Opt-In Downloads Problem Types: CWE-434 Description: The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the admin_upload() function in all versions up to, and including, 4.07. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Due to the presence of an .htaccess file, thi
the affected site's server which may make remote code execution possible. Due to the presence of an .htaccess file, this can only be exploited to achieve RCE on NGINX servers, unless another vulnerability is present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5c3c20b8-12cf-4ce6-a1d4-99204df33fcd?source=cve - https://codecanyon.net/item/subscribe-download/2687305
CVE ID: CVE-2024-10591 State: PUBLISHED Published: 2025-01-30T13:42:08.906Z Last Updated: 2025-01-30T14:22:59.772Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: makewebbetter Products: MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics Problem Types: CWE-862 Description: The MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hubwoo_save_updates() function in all versions up to, and including, 1.5.9. This makes i
missing capability check on the hubwoo_save_updates() function in all versions up to, and including, 1.5.9. This makes it possible for authenticated attackers, with Contributor-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bd38b5f2-f13e-4433-9a8a-2f42cc1782c6?source=cve - https://plugins.trac.wordpress.org/browser/makewebbetter-hubspot-for-woocommerce/trunk/inclu
a-2f42cc1782c6?source=cve - https://plugins.trac.wordpress.org/browser/makewebbetter-hubspot-for-woocommerce/trunk/includes/class-hubwoo-ajax-handler.php#L845
CVE ID: CVE-2024-10592 State: PUBLISHED Published: 2024-11-16T09:36:35.455Z Last Updated: 2024-11-16T15:08:28.117Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mapster Products: Mapster WP Maps Problem Types: CWE-80 Description: The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the popup class parameter in all versions up to, and including, 1.6.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst
o inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3f1c13f6-150c-4634-a4d8-176a4d7a2296?source=cve - https://wordpress.org/plugins/mapster-wp-maps/#developers
CVE ID: CVE-2024-10593 State: PUBLISHED Published: 2024-11-13T02:33:17.019Z Last Updated: 2024-11-13T16:46:34.273Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: smub Products: WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More Problem Types: CWE-352 Description: The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.1.6. This is due to missing or incorrect nonce validation on the process_admin_ui function. This makes it possible for unauthenticated attackers to delete WPForm
nonce validation on the process_admin_ui function. This makes it possible for unauthenticated attackers to delete WPForm logs via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6d1ea80a-a1ce-4964-8dde-f3ed2df5537c?source=cve - https://plugins.trac.wordpress.org/browser/wpforms-lite/tags/1.9.1.6/src/Admin/Tools/Views/Logs.php#L269 - https://plugins.trac.wordpress.org/browser/wpforms-lite/tags/1.9.1.6/src/Logger/ListTable.php#L394
CVE ID: CVE-2024-10594 State: PUBLISHED Published: 2024-10-31T20:31:06.717Z Last Updated: 2024-11-01T19:29:13.191Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89 Description: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analy
c and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282606 - https://vuldb.com/?ctiid.282606 - https://vuldb.com/?submit.430050 - https://flowus.cn/share/b95a0695-de84-4459-aa7b-87a1400d5509?code=G8A6P3
CVE ID: CVE-2024-10595 State: PUBLISHED Published: 2024-10-31T20:31:09.750Z Last Updated: 2024-11-01T20:32:05.104Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89 Description: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes
y be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282607 - https://vuldb.com/?ctiid.282607 - https://vuldb.com/?submit.430051 - https://flowus.cn/share/651b6010-4701-4cec-a5a3-6e01e22636b9?code=G8A6P3
CVE ID: CVE-2024-10596 State: PUBLISHED Published: 2024-10-31T21:00:08.250Z Last Updated: 2024-11-01T20:30:12.362Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89 Description: A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Ana
lic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282608 - https://vuldb.com/?ctiid.282608 - https://vuldb.com/?submit.431307 - https://flowus.cn/share/0c59c0ea-9624-42b5-9e06-66fab39b773c?code=G8A6P3
CVE ID: CVE-2024-10597 State: PUBLISHED Published: 2024-10-31T21:00:11.349Z Last Updated: 2024-11-01T20:21:11.001Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ESAFENET Products: CDG Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - C
used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282609 - https://vuldb.com/?ctiid.282609 - https://vuldb.com/?submit.431325 - https://flowus.cn/share/380bcc9d-95ae-4576-b3df-bf3b06f1c5cd?code=G8A6P3
CVE ID: CVE-2024-10598 State: PUBLISHED Published: 2024-10-31T21:31:04.186Z Last Updated: 2024-11-01T14:36:22.768Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Tongda Products: OA Problem Types: CWE-285 Description: A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282610 - https://vuldb.com/?ctiid.282610 - https://vuldb.com/?submit.433495 - https://github.com/LvZCh/td/issues/1
CVE ID: CVE-2024-10599 State: PUBLISHED Published: 2024-10-31T21:31:05.719Z Last Updated: 2024-11-01T14:35:03.969Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Tongda Products: OA 2017 Problem Types: CWE-400 Description: A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects some unknown processing of the file /inc/package_static_resources.php. The manipulation leads to resource consumption. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282611 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282611 - https://vuldb.com/?ctiid.282611 - https://vuldb.com/?submit.433496 - https://github.com/LvZCh/td/issues/2
CVE ID: CVE-2024-10600 State: PUBLISHED Published: 2024-10-31T23:00:06.958Z Last Updated: 2024-11-01T15:53:34.683Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6. Affected is an unknown function of the file pda/appcenter/submenu.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282612 - https://vuldb.com/?ctiid.282612 - h
Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282612 - https://vuldb.com/?ctiid.282612 - https://vuldb.com/?submit.433497 - https://github.com/LvZCh/td/issues/3
CVE ID: CVE-2024-10601 State: PUBLISHED Published: 2024-10-31T23:00:08.658Z Last Updated: 2024-11-01T15:51:43.973Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the argument where_repeat leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282613 - https://vuldb.com/?ctiid.282613 - https://vuldb.com/?submit.433498 - https://github.com/LvZCh/td/issues/4
CVE ID: CVE-2024-10602 State: PUBLISHED Published: 2024-10-31T23:31:04.070Z Last Updated: 2024-11-01T14:28:15.929Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file /general/approve_center/list/input_form/data_picker_link.php. The manipulation of the argument dataSrc leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282614 - https://vuldb.com/?ctiid.282614 - https://vuldb.com/?submit.433499 - https://github.com/LvZCh/td/issues/5
CVE ID: CVE-2024-10603 State: PUBLISHED Published: 2025-01-30T19:14:38.619Z Last Updated: 2025-02-24T11:59:44.637Z Vendors: Google Products: gVisor Problem Types: CWE-340 Description: Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2 - https://github.com/google/gvisor/commit/cbdb2c61b1f753834cedf2ebe68cbc335dadca52 - https://github.com/google/gvisor/commit/5d2bf2546805afa09a6f6d9b23ec267823e32205 - https://www.ndss-symposiu
35dadca52 - https://github.com/google/gvisor/commit/5d2bf2546805afa09a6f6d9b23ec267823e32205 - https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf
CVE ID: CVE-2024-10604 State: PUBLISHED Published: 2025-01-30T19:17:10.012Z Last Updated: 2025-02-24T12:00:19.548Z Vendors: Google Products: Fuchsia Problem Types: CWE-330 Description: Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fuchsia.googlesource.com/fuchsia/+/a3c17a4d6b3140f9175d6cf6ac4eb4e775f8dea8 - https://fuchsia.googlesource.com/fuchsia/+/40e7fbcdcd013441daf4492f1ead349a9e5b80dc - https://www.ndss-symposium.org/wp-
https://fuchsia.googlesource.com/fuchsia/+/40e7fbcdcd013441daf4492f1ead349a9e5b80dc - https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf
CVE ID: CVE-2024-10605 State: PUBLISHED Published: 2024-10-31T23:31:05.904Z Last Updated: 2024-11-01T20:28:35.499Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-352 Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /file/request.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282615 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282615 - https://vuldb.com/?ctiid.282615 - https://vuldb.com/?submit.434756 - https://github.com/bevennyamande/receiver_request_sample_csrf - https://code-projects.org/
CVE ID: CVE-2024-10606 State: PUBLISHED Published: 2024-11-23T04:32:21.697Z Last Updated: 2024-11-23T13:28:20.666Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wptravelengine Products: WP Travel Engine – Tour Booking Plugin – Tour Operator Software Problem Types: CWE-862 Description: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpte_onboard_save_function_callback() function in all versions up to, and including, 6.2.1. This makes it possible for authenticated attackers, with contributor-level access and above, to modify se
luding, 6.2.1. This makes it possible for authenticated attackers, with contributor-level access and above, to modify several settings that could have an impact such as lost revenue and page updates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c91d1ec0-0430-4ddd-b6b1-25af0b5cea9d?source=cve - https://plugins.trac.wordpress.org/changeset/3193913/wp-travel-engine/tags/6.2.2/includes/class-wp-travel-engine-onboard.php
CVE ID: CVE-2024-10607 State: PUBLISHED Published: 2024-11-01T00:00:08.354Z Last Updated: 2024-11-01T15:28:02.149Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Courier Management System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2826
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282616 - https://vuldb.com/?ctiid.282616 - https://vuldb.com/?submit.434773 - https://github.com/yanhuoshanjin/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2024-10608 State: PUBLISHED Published: 2024-11-01T00:31:04.587Z Last Updated: 2024-11-01T15:21:20.220Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Courier Management System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282617 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282617 - https://vuldb.com/?ctiid.282617 - https://vuldb.com/?submit.434785 - https://github.com/AXUyaku/cve/issues/1 - https://code-projects.org/