Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-20981 State: PUBLISHED Published: 2021-08-12T14:49:21 Last Updated: 2024-08-04T14:22:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yao123123123/CVE/issues/1
CVE ID: CVE-2020-20982 State: PUBLISHED Published: 2021-11-03T16:07:28 Last Updated: 2024-08-04T14:22:25.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shadoweb/wdja/issues/1
CVE ID: CVE-2020-20988 State: PUBLISHED Published: 2021-08-12T21:07:56 Last Updated: 2024-08-04T14:22:25.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://mycvee.blogspot.com/p/xss2.html
CVE ID: CVE-2020-20989 State: PUBLISHED Published: 2021-08-12T21:07:57 Last Updated: 2024-08-04T14:22:25.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs. Additional Analyst Notes: - CVE Program Container: References: - https://mycvee.blogspot.com/p/csrf.html
CVE ID: CVE-2020-20990 State: PUBLISHED Published: 2021-08-12T21:07:58 Last Updated: 2024-08-04T14:22:25.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://mycvee.blogspot.com/p/xss1.html
CVE ID: CVE-2020-21003 State: PUBLISHED Published: 2021-06-03T14:00:28 Last Updated: 2024-08-04T14:22:25.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Computer2200/-/issues/3
CVE ID: CVE-2020-21005 State: PUBLISHED Published: 2021-06-03T13:54:30 Last Updated: 2024-08-04T14:22:25.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Computer2200/-/issues/4 - http://www.wellcms.cn/read-27.html&&
CVE ID: CVE-2020-21009 State: REJECTED Published: 2020-12-09T16:29:05 Last Updated: 2020-12-09T16:29:05 Description: No description available.
CVE ID: CVE-2020-21012 State: PUBLISHED Published: 2021-10-01T18:21:53 Last Updated: 2024-08-04T14:22:25.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hitIer/web_test/tree/master/hotel
CVE ID: CVE-2020-21013 State: PUBLISHED Published: 2021-10-01T18:21:54 Last Updated: 2024-08-04T14:22:25.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog v6.0.0 contains a SQL injection via /admin/comment.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/52
CVE ID: CVE-2020-21014 State: PUBLISHED Published: 2021-10-01T18:21:55 Last Updated: 2024-08-04T14:22:25.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/53
CVE ID: CVE-2020-21016 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-07T13:51:24.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/dahua966/Routers-vuls/blob/master/DIR-846/GuestWLanSetting_RCE.md
CVE ID: CVE-2020-21038 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:49:44.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/typecho/typecho/issues/952 - https://github.com/typecho/typecho
CVE ID: CVE-2020-21041 State: PUBLISHED Published: 2021-05-24T17:31:03 Last Updated: 2024-08-04T14:22:25.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/7989 - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990
CVE ID: CVE-2020-21046 State: PUBLISHED Published: 2022-06-24T15:11:58 Last Updated: 2024-08-04T14:22:25.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local privilege escalation vulnerability was identified within the "luminati_net_updater_win_eagleget_com" service in EagleGet Downloader version 2.1.5.20 Stable. This issue allows authenticated non-administrative user to escalate their privilege and conduct code execution as a SYSTEM privilege. Additional Analyst Notes: - CVE Program Container: References: - http://eagleget.com - https://medium.com/%40n1pwn/local-privilege-escalation-in-eagleget-1fde79fe47c0
CVE ID: CVE-2020-21047 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-07T15:41:01.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25068 - https://
ogram Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25068 - https://sourceware.org/git/?p=elfutils.git%3Ba=commitdiff%3Bh=99dc63b10b3878616b85df2dfd2e4e7103e414b8 - https://lists.debian.org/debian-lts-announce/2023/09/msg00026.html
CVE ID: CVE-2020-21048 State: PUBLISHED Published: 2021-09-14T15:09:26 Last Updated: 2024-08-04T14:22:25.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service (DOS) via a crafted PNG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/73 - https://github.com/saitoha/libsixel/commit/cb373ab6614c910407c5e5a93ab935144e62b037 - https://github.com/saitoha/libsixel/releases/tag/v1.8.4 - https://github.com/saitoha/libsixel/blob/master/ChangeLog - https://bitbucket.org/netbsd/pkgsrc/commits/6f0c011cbfccdffa635d04c84433b1a
com/saitoha/libsixel/blob/master/ChangeLog - https://bitbucket.org/netbsd/pkgsrc/commits/6f0c011cbfccdffa635d04c84433b1a02687adad
CVE ID: CVE-2020-21049 State: PUBLISHED Published: 2021-09-14T15:09:28 Last Updated: 2024-08-04T14:22:25.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (DOS) via a crafted PSD file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/blob/master/ChangeLog - https://github.com/saitoha/libsixel/issues/74 - https://github.com/saitoha/libsixel/commit/0b1e0b3f7b44233f84e5c9f512f8c90d6bbbe33d - https://github.com/saitoha/libsixel/releases/tag/v1.8.5 - https://bitbucket.org/netbsd/pkgsrc/commits/970a81d31ec7498e04d09
ps://github.com/saitoha/libsixel/releases/tag/v1.8.5 - https://bitbucket.org/netbsd/pkgsrc/commits/970a81d31ec7498e04d09b6b7771cef35f63cd28
CVE ID: CVE-2020-21050 State: PUBLISHED Published: 2021-09-14T15:09:29 Last Updated: 2024-08-04T14:22:25.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/121.html - https://github.com/saitoha/libsixel/blob/master/ChangeLog - https://github.com/saitoha/libsixel/releases/tag/v1.8.5 - https://github.com/saitoha/libsixel/issues/75 - https://github.com/saitoha/libsixel/commit/7808a06b88c11dbc502318cdd51fa374f8cd47ee - https://bitbucket.org/netbsd/pkgsrc/commits/a27113e21179c
oha/libsixel/commit/7808a06b88c11dbc502318cdd51fa374f8cd47ee - https://bitbucket.org/netbsd/pkgsrc/commits/a27113e21179cbfbfae0c35f6a9edd6aa498faae
CVE ID: CVE-2020-21052 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T17:14:59.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/94fzb/zrlog/issues/56
CVE ID: CVE-2020-21053 State: PUBLISHED Published: 2021-05-20T14:47:31 Last Updated: 2024-08-04T14:22:25.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "query_string" variable in app\devices\device_imports.php. Additional Analyst Notes: - CVE Program Container: References: - https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-xss-22/ - https://github.com/fusionpbx/fusionpbx/commit/2ce613f1e9fe8ffab7a4cb9d1384444622285335
CVE ID: CVE-2020-21054 State: PUBLISHED Published: 2021-05-20T15:31:43 Last Updated: 2024-08-04T14:22:25.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php. Additional Analyst Notes: - CVE Program Container: References: - https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-xss-21/ - https://github.com/fusionpbx/fusionpbx/commit/2489004c7b7e0b14e21cd86cedaab87fed209415
CVE ID: CVE-2020-21055 State: PUBLISHED Published: 2021-05-20T15:42:13 Last Updated: 2024-08-04T14:22:25.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder, (2) filename, and (3) newfilename variables in app\edit\filerename.php. Additional Analyst Notes: - CVE Program Container: References: - https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-path-traversal-6/ - https://github.com/fusionpbx/fusionpbx/commit/1a88ca61a744914d3336cc15a40fb3edbcde9085
CVE ID: CVE-2020-21056 State: PUBLISHED Published: 2021-05-20T15:46:10 Last Updated: 2024-08-04T14:22:25.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php. Additional Analyst Notes: - CVE Program Container: References: - https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-path-traversal-5/ - https://github.com/fusionpbx/fusionpbx/commit/cad71240dee2a82cd5766dd67039a87849031aaa
CVE ID: CVE-2020-21057 State: PUBLISHED Published: 2021-05-20T15:51:48 Last Updated: 2024-08-04T14:22:25.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php. Additional Analyst Notes: - CVE Program Container: References: - https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-path-traversal-4/ - https://github.com/fusionpbx/fusionpbx/commit/026c3958c3c7ca6b2ff067addc991aac8f41cf11
CVE ID: CVE-2020-21058 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T16:48:53.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute arbitrary code via the mermaid sytax. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/typora/typora-issues/issues/2959
CVE ID: CVE-2020-21060 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T16:37:48.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gaozhifeng/PHPMyWind/issues/10
CVE ID: CVE-2020-21064 State: REJECTED Published: 2021-08-13T20:38:43 Last Updated: 2021-09-01T14:00:16 Description: No description available.
CVE ID: CVE-2020-21066 State: PUBLISHED Published: 2021-08-13T20:38:40 Last Updated: 2024-08-04T14:22:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42aac. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/408
CVE ID: CVE-2020-21081 State: PUBLISHED Published: 2021-09-14T15:57:33 Last Updated: 2024-08-04T14:22:25.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms8/issues/2
CVE ID: CVE-2020-21082 State: PUBLISHED Published: 2021-09-14T15:57:35 Last Updated: 2024-08-04T14:22:25.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms8/issues/2
CVE ID: CVE-2020-21087 State: PUBLISHED Published: 2021-04-14T13:49:30 Last Updated: 2024-08-04T14:22:25.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Module" tool. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/X2Engine/X2CRM/issues/162
CVE ID: CVE-2020-21088 State: PUBLISHED Published: 2021-04-14T13:49:44 Last Updated: 2024-08-04T14:22:25.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fields in "/index.php/contacts/create page" Additional Analyst Notes: - CVE Program Container: References: - https://github.com/X2Engine/X2CRM/issues/161 - https://github.com/X2Engine/X2CRM/issues/183
CVE ID: CVE-2020-21101 State: PUBLISHED Published: 2021-04-29T16:57:44 Last Updated: 2024-08-04T14:22:25.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Screenly/screenly-ose/issues/1254
CVE ID: CVE-2020-21119 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-20T14:07:32.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gain escalated privileges and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/259
CVE ID: CVE-2020-21120 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-20T14:06:41.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookie_cart parameter to /index.php/cart/num. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alixiaowei/cve_test/issues/3 - https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html
CVE ID: CVE-2020-21121 State: PUBLISHED Published: 2021-09-15T16:16:43 Last Updated: 2024-08-04T14:22:25.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/259
CVE ID: CVE-2020-21122 State: PUBLISHED Published: 2021-09-15T16:16:44 Last Updated: 2024-08-04T14:22:25.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/youseries/ureport/issues/483
CVE ID: CVE-2020-21124 State: PUBLISHED Published: 2021-09-15T16:16:46 Last Updated: 2024-08-04T14:22:25.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/youseries/ureport/issues/484
CVE ID: CVE-2020-21125 State: PUBLISHED Published: 2021-09-15T16:16:46 Last Updated: 2024-08-04T14:22:25.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/youseries/ureport/issues/485
CVE ID: CVE-2020-21126 State: PUBLISHED Published: 2021-09-15T16:16:47 Last Updated: 2024-08-04T14:22:25.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetInfo 7.0.0 contains a Cross-Site Request Forgery (CSRF) via admin/?n=admin&c=index&a=doSaveInfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Echox1/metinfo_csrf/issues/1
CVE ID: CVE-2020-21127 State: PUBLISHED Published: 2021-09-15T16:16:48 Last Updated: 2024-08-04T14:22:25.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/T3qui1a/metinfo_sqlinjection/issues/1
CVE ID: CVE-2020-21130 State: PUBLISHED Published: 2021-06-21T15:16:52 Last Updated: 2024-08-04T14:22:25.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hisiphp/hisiphp/issues/7
CVE ID: CVE-2020-21131 State: PUBLISHED Published: 2021-07-12T12:45:35 Last Updated: 2024-08-04T14:22:25.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SZFsir/tmpProject/issues/3 - https://www.mituo.cn/news/2473.html
CVE ID: CVE-2020-21132 State: PUBLISHED Published: 2021-07-12T12:45:44 Last Updated: 2024-08-04T14:22:25.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Metinfo 7.0.0beta in index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SZFsir/tmpProject/issues/2 - https://www.mituo.cn/news/2473.html
CVE ID: CVE-2020-21133 State: PUBLISHED Published: 2021-07-12T12:45:51 Last Updated: 2024-08-04T14:22:25.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SZFsir/tmpProject/issues/1 - https://www.mituo.cn/news/2473.html
CVE ID: CVE-2020-21139 State: PUBLISHED Published: 2021-11-04T19:09:11 Last Updated: 2024-08-04T14:22:25.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ryan0lb/EC-cloud-e-commerce-system-CVE-application/blob/master/README.md
CVE ID: CVE-2020-21141 State: PUBLISHED Published: 2021-11-12T21:57:32 Last Updated: 2024-08-04T14:22:25.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hxcc/just_for_fun/blob/master/ICMS%20CSRF
CVE ID: CVE-2020-21142 State: PUBLISHED Published: 2021-06-28T19:08:10 Last Updated: 2024-08-04T14:22:25.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.ipfire.org/show_bug.cgi?id=12226