Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7925 State: PUBLISHED Published: 2024-08-19T18:00:15.442Z Last Updated: 2024-09-03T17:24:33.860Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: ZZCMS Problem Types: CWE-200 Description: A vulnerability was found in ZZCMS 2023. It has been rated as problematic. This issue affects some unknown processing of the file 3/E_bak5.1/upload/eginfo.php. The manipulation of the argument phome with the input ShowPHPInfo leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.27
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275111 - https://vuldb.com/?ctiid.275111 - https://vuldb.com/?submit.392121 - https://gitee.com/A0kooo/cve_article/blob/master/zzcms/information_leak/Zenmus%20ekinfo.php%20had%20an%20information%20leak.md
CVE ID: CVE-2024-7926 State: PUBLISHED Published: 2024-08-19T19:31:08.434Z Last Updated: 2024-08-20T14:06:06.946Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: ZZCMS Problem Types: CWE-22 Description: A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/about_edit.php?action=modify. The manipulation of the argument skin leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275112 - https://vuldb.com/?ctiid.275112 - https://vuldb.com/?
ISA ADP Vulnrichment: References: - https://vuldb.com/?id.275112 - https://vuldb.com/?ctiid.275112 - https://vuldb.com/?submit.392181 - https://gitee.com/A0kooo/cve_article/blob/master/zzcms/Directory_traversal2/zzcms%20siteinfo.php%20Directory%20traversal.md
CVE ID: CVE-2024-7927 State: PUBLISHED Published: 2024-08-19T20:00:10.055Z Last Updated: 2024-08-20T14:00:45.623Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: ZZCMS Problem Types: CWE-22 Description: A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin[] leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275113 - https://vuldb.com/?ctiid.275113 - http
lyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275113 - https://vuldb.com/?ctiid.275113 - https://vuldb.com/?submit.392186 - https://gitee.com/A0kooo/cve_article/blob/master/zzcms/Directory_traversal3/zzcms%20class.php%20Directory%20traversal.md
CVE ID: CVE-2024-7928 State: PUBLISHED Published: 2024-08-19T21:31:06.029Z Last Updated: 2024-09-03T17:18:08.006Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: FastAdmin Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.4.20220530 is able to address this issue. It is recommended to upgrade
public and may be used. Upgrading to version 1.3.4.20220530 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275114 - https://vuldb.com/?ctiid.275114 - https://vuldb.com/?submit.392202 - https://wiki.shikangsi.com/post/share/da0292b8-0f92-4e6e-bdb7-73f47b901acd
CVE ID: CVE-2024-7929 State: PUBLISHED Published: 2024-08-19T21:31:07.515Z Last Updated: 2024-08-20T13:45:58.978Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple Forum Website Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
tack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275115 - https://vuldb.com/?ctiid.275115 - https://vuldb.com/?submit.392325 - https://github.com/ulayaha/ulayaha.github.io/issues/2
CVE ID: CVE-2024-7930 State: PUBLISHED Published: 2024-08-19T22:00:04.921Z Last Updated: 2024-09-03T17:15:47.974Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pms/ajax/get_packings.php. The manipulation of the argument medicine_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275116 - https://vuldb.com/?ctiid.275116 - https://vuldb.com/?submit.392934 - https://github.com/Pingxy/cve/blob/main/sql.md
CVE ID: CVE-2024-7931 State: PUBLISHED Published: 2024-08-19T22:00:06.625Z Last Updated: 2024-08-20T14:02:17.183Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Graduate Tracer System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the file /tracking/admin/view_csprofile.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275117 - https://vuldb.com/?ctiid.275117 - https://vuldb.com/?submit.392942 - https://github.com/Pingxy/cve/blob/main/sql3.md
CVE ID: CVE-2024-7932 State: PUBLISHED Published: 2024-09-02T11:48:47.727Z Last Updated: 2024-09-13T07:02:11.678Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2024-7933 State: PUBLISHED Published: 2024-08-19T22:31:03.859Z Last Updated: 2024-08-20T15:43:13.833Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Project Expense Monitoring System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been classified as critical. Affected is an unknown function of the file login1.php of the component Backend Login. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275118 - https://vuldb.com/?ctiid.275118 - https://vuldb.com/?submit.392945 - https://github.com/DeepMountains/zzz/blob/main/CVE3-1.md
CVE ID: CVE-2024-7934 State: PUBLISHED Published: 2024-08-19T22:31:05.437Z Last Updated: 2024-08-20T13:42:26.926Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Project Expense Monitoring System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file execute.php. The manipulation of the argument code leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275119 - https://vuldb.com/?ctiid.275119 - https://vuldb.com/?submit.392946 - https://github.com/DeepMountains/zzz/blob/main/CVE3-2.md
CVE ID: CVE-2024-7935 State: PUBLISHED Published: 2024-08-19T23:00:05.798Z Last Updated: 2024-08-20T13:18:08.650Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Project Expense Monitoring System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file print.php. The manipulation of the argument map_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275120 - https://vuldb.com/?ctiid.275120 - https://vuldb.com/?submit.392947 - https://github.com/DeepMountains/zzz/blob/main/CVE3-3.md
CVE ID: CVE-2024-7936 State: PUBLISHED Published: 2024-08-19T23:31:04.019Z Last Updated: 2024-09-03T17:14:33.758Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Project Expense Monitoring System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in itsourcecode Project Expense Monitoring System 1.0. This affects an unknown part of the file transferred_report.php. The manipulation of the argument start/end/employee leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275121 - https://vuldb.com/?ctiid.275121 - https://vuldb.com/?submit.392948 - https://github.com/DeepMountains/zzz/blob/main/CVE3-4.md
CVE ID: CVE-2024-7937 State: PUBLISHED Published: 2024-08-20T00:00:06.619Z Last Updated: 2024-08-20T13:42:16.588Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Project Expense Monitoring System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerability affects unknown code of the file printtransfer.php. The manipulation of the argument transfer_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.27
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275122 - https://vuldb.com/?ctiid.275122 - https://vuldb.com/?submit.392949 - https://github.com/DeepMountains/zzz/blob/main/CVE3-5.md
CVE ID: CVE-2024-7938 State: PUBLISHED Published: 2024-09-02T11:48:55.282Z Last Updated: 2024-09-03T14:13:26.749Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2024-7939 State: PUBLISHED Published: 2024-09-02T11:49:00.762Z Last Updated: 2024-09-13T07:02:19.477Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2024-7940 State: PUBLISHED Published: 2024-08-27T12:52:24.601Z Last Updated: 2024-08-27T13:43:15.252Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Hitachi Energy Products: MicroSCADA SYS600 Problem Types: CWE-306 Description: The product exposes a service that is intended for local only to all network interfaces without any authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000160&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-7941 State: PUBLISHED Published: 2024-08-27T12:57:55.044Z Last Updated: 2024-08-27T13:12:59.267Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Hitachi Energy Products: MicroSCADA SYS600 Problem Types: CWE-601 Description: An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000160&LanguageCode=en&DocumentPartId=&Action=Lau
ferences: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000160&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-7942 State: PUBLISHED Published: 2024-08-20T00:00:08.345Z Last Updated: 2024-08-20T13:51:12.783Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Leads Manager Tool Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phone_number leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275134 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275134 - https://vuldb.com/?ctiid.275134 - https://vuldb.com/?submit.393338 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Lead_Manager_Tool_Update_Leads_XSS.md
CVE ID: CVE-2024-7943 State: PUBLISHED Published: 2024-08-20T00:31:04.277Z Last Updated: 2024-08-20T16:12:38.394Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Laravel Property Management System Problem Types: CWE-434 Description: A vulnerability was found in itsourcecode Laravel Property Management System 1.0 and classified as critical. This issue affects the function upload of the file PropertiesController.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275135 - https://vuldb.com/?ctiid.275135 - https://vuldb.com/?submit.393371 - https://github.com/DeepMountains/zzz/blob/main/CVE2-1.md
CVE ID: CVE-2024-7944 State: PUBLISHED Published: 2024-08-20T01:00:06.105Z Last Updated: 2024-08-20T13:46:36.691Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Laravel Property Management System Problem Types: CWE-434 Description: A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275136 - https://vuldb.com/?ctiid.275136 - https://vuldb.com/?submit.393372 - https://github.com/DeepMountains/zzz/blob/main/CVE2-2.md
CVE ID: CVE-2024-7945 State: PUBLISHED Published: 2024-08-20T01:00:07.668Z Last Updated: 2024-08-20T13:16:38.608Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: itsourcecode Products: Laravel Property Management System Problem Types: CWE-79 Description: A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/notes/create of the component Notes Page. The manipulation of the argument Note text leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Not
he attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275137 - https://vuldb.com/?ctiid.275137 - https://vuldb.com/?submit.393373 - https://github.com/DeepMountains/zzz/blob/main/CVE2-3.md
CVE ID: CVE-2024-7946 State: PUBLISHED Published: 2024-08-20T01:31:03.858Z Last Updated: 2024-08-21T19:22:21.046Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Online Blood Bank Management System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file register.php of the component User Signup. The manipulation of the argument user leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275138 - https://vuldb.com/?ctiid.275138 - https://vuldb.com/?submit.393382 - https://github.com/a1175165157/cve/issues/1
CVE ID: CVE-2024-7947 State: PUBLISHED Published: 2024-08-20T01:31:05.292Z Last Updated: 2024-08-20T16:22:32.385Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Point of Sales and Inventory Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275139 - https://vuldb.com/?ctiid.275139 - https://vuldb.com/?submit.393525 - https://github.com/CveSecLook/cve/issues/60
CVE ID: CVE-2024-7948 State: PUBLISHED Published: 2024-08-20T02:00:04.581Z Last Updated: 2024-08-20T13:15:10.197Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Accounts Manager App Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vuln
tiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275140 - https://vuldb.com/?ctiid.275140 - https://vuldb.com/?submit.393921 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Accounts_Manager_App_update_account_xss.md
CVE ID: CVE-2024-7949 State: PUBLISHED Published: 2024-08-20T02:00:06.197Z Last Updated: 2024-08-21T19:25:25.005Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Graduate Tracer System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetch_genderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275142 - https://vuldb.com/?ctiid.275142 - https://vuldb.com/?submit.394046 - https://github.com/Pingxy/cve/blob/main/sql4.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-7950 State: PUBLISHED Published: 2024-09-04T02:33:48.311Z Last Updated: 2024-09-04T14:21:07.903Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-22 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusion, Arbitrary Settings Update, and User Creation in all versions up to, and including, 2.1.6 via several functions called by the 'checkFormRequest' function. This makes it possible for unauthenticated attackers to include and e
nctions called by the 'checkFormRequest' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Attackers can also update arbitrary settings and create user accounts even when registration is disabled, leading to user creation with a default role of Administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ca1d5275-3398-47a7-889