Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6578 State: PUBLISHED Published: 2025-06-24T20:00:12.898Z Last Updated: 2025-06-24T20:42:13.361Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete_account.php. The manipulation of the argument admin_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA AD
be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313774 - https://vuldb.com/?ctiid.313774 - https://vuldb.com/?submit.601763 - https://github.com/yangfan-lang/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-6579 State: PUBLISHED Published: 2025-06-24T20:00:14.893Z Last Updated: 2025-06-24T20:42:47.366Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /message_admin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313775 - https://vuldb.com/?ctiid.313775 - https://vuldb.com/?submit.601764 - https://github.com/yangfan-lang/cve/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-6580 State: PUBLISHED Published: 2025-06-24T21:31:06.699Z Last Updated: 2025-06-25T14:26:17.988Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313776 - https://vuldb.com/?ctiid.313776 - https://vuldb.com/?submit.601908 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-1.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6581 State: PUBLISHED Published: 2025-06-24T22:31:06.294Z Last Updated: 2025-06-25T14:25:55.795Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriage_date leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additiona
injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313777 - https://vuldb.com/?ctiid.313777 - https://vuldb.com/?submit.601909 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-2.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6582 State: PUBLISHED Published: 2025-06-24T23:31:06.062Z Last Updated: 2025-06-25T14:25:30.695Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA AD
be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313778 - https://vuldb.com/?ctiid.313778 - https://vuldb.com/?submit.601910 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-3.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6583 State: PUBLISHED Published: 2025-06-25T00:00:15.196Z Last Updated: 2025-06-25T14:25:06.447Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313779 - https://vuldb.com/?ctiid.313779 - https://vuldb.com/?submit.601911 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-4.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6585 State: PUBLISHED Published: 2025-07-22T04:25:08.363Z Last Updated: 2025-07-22T15:52:23.467Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: n/a Products: WP JobHunt Problem Types: CWE-20 Description: The WP JobHunt plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.2 via the cs_remove_profile_callback() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete accounts of other users including admins. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www
e accounts of other users including admins. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/afb3e0e0-68c7-43f6-981f-59c3f3507429?source=cve - https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636
CVE ID: CVE-2025-6586 State: PUBLISHED Published: 2025-07-04T01:44:03.464Z Last Updated: 2025-07-08T14:23:09.878Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: metagauss Products: Download Plugin Problem Types: CWE-434 Description: The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dpwap_plugin_locInstall function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA A
ry files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/37734c25-cce3-41fb-babf-714ba7a4bced?source=cve - https://plugins.trac.wordpress.org/browser/download-plugin/tags/2.2.8/app/Plugins/Dpwapuploader.php#L300
CVE ID: CVE-2025-6587 State: PUBLISHED Published: 2025-07-03T10:03:27.155Z Last Updated: 2025-07-04T03:55:30.300Z Vendors: Docker Products: Docker Desktop Problem Types: CWE-532 Description: System environment variables are recorded in Docker Desktop diagnostic logs, when using shell auto-completion. This leads to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain secrets and further use them to gain unauthorized access to other systems. Starting with version 4.43.0 Docker Desktop no longer logs system environment variables as part of diagnostics log collection. Additional Analyst Notes: - CISA ADP
no longer logs system environment variables as part of diagnostics log collection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#check-the-logs
CVE ID: CVE-2025-6588 State: PUBLISHED Published: 2025-07-24T09:22:21.631Z Last Updated: 2025-07-24T13:10:35.907Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: funnelcockpit Products: FunnelCockpit Problem Types: CWE-79 Description: The FunnelCockpit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘error’ parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link.
that execute if they can successfully trick an administrative user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/df2e744f-e1d6-4380-8e24-e98e9df4dd2f?source=cve - https://plugins.trac.wordpress.org/browser/funnelcockpit/trunk/admin/class-funnelcockpit-admin.php#L433
CVE ID: CVE-2025-6599 State: PUBLISHED Published: 2025-11-18T01:19:47.163Z Last Updated: 2025-11-18T16:35:31.932Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Zyxel Products: DX3301-T0 firmware Problem Types: CWE-400 Description: An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt access to the web management interface, while other networking services remain unaffected. Additional Analyst Notes: - CISA ADP Vulnr
web management interface, while other networking services remain unaffected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025
CVE ID: CVE-2025-6600 State: PUBLISHED Published: 2025-07-01T18:56:45.625Z Last Updated: 2025-07-01T19:38:49.147Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-200 Description: An exposure of sensitive information vulnerability was identified in GitHub Enterprise Server that could allow an attacker to disclose the names of private repositories within an organization. This issue could be exploited by leveraging a user-to-server token with no scopes via the Search API endpoint. Successful exploitation required an organization administrator to install a malicious GitHub App in the organization’s repositories. This vulnerability impacted only GitHub Enterprise Server vers
malicious GitHub App in the organization’s repositories. This vulnerability impacted only GitHub Enterprise Server version 3.17 and was addressed in version 3.17.2. The vulnerability was reported through the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.2
CVE ID: CVE-2025-6601 State: PUBLISHED Published: 2025-10-27T00:06:04.304Z Last Updated: 2025-11-24T07:26:31.684Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-840 Description: GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/ - https://gitlab.com/gitlab
rences: - https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/551267 - https://hackerone.com/reports/3209641
CVE ID: CVE-2025-6603 State: PUBLISHED Published: 2025-06-25T10:31:05.220Z Last Updated: 2025-06-25T13:42:33.206Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R) Vendors: coldfunction Products: qCUDA Problem Types: CWE-190, CWE-189 Description: A vulnerability was found in coldfunction qCUDA up to db0085400c2f2011eed46fbc04fdc0873141688e. It has been rated as problematic. Affected by this issue is the function qcow_make_empty of the file qCUDA/qcu-device/block/qcow.c. The manipulation of the argument s->l1_size leads to integer overflow. The attack needs to be approached locally. This product is using a rolling release to provide continious delivery. Th
w. The attack needs to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313820 - https://vuldb.com/?ctiid.313820 - https://vuldb.com/?submit.601029 - https://github.com/coldfunction/qCUDA/issues/10
CVE ID: CVE-2025-6604 State: PUBLISHED Published: 2025-06-25T13:00:12.245Z Last Updated: 2025-06-25T14:24:27.926Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313821 - https://vuldb.com/?ctiid.313821 - https://vuldb.com/?submit.601913 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-5.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6605 State: PUBLISHED Published: 2025-06-25T13:31:05.737Z Last Updated: 2025-06-25T14:24:05.928Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313822 - https://vuldb.com/?ctiid.313822 - https://vuldb.com/?submit.601914 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-6.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6606 State: PUBLISHED Published: 2025-06-25T13:31:08.116Z Last Updated: 2025-06-25T14:23:39.326Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. This issue affects some unknown processing of the file /panel/add-services.php. The manipulation of the argument Type leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313823 - https://vuldb.com/?ctiid.313823 - https://vuldb.com/?submit.601915 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-7.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6607 State: PUBLISHED Published: 2025-06-25T14:00:15.777Z Last Updated: 2025-06-25T14:22:42.505Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313824 - https://vuldb.com/?ctiid.313824 - https://vuldb.com/?submit.601916 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-8.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6608 State: PUBLISHED Published: 2025-06-25T14:31:06.417Z Last Updated: 2025-06-25T15:00:45.967Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
aunched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313825 - https://vuldb.com/?ctiid.313825 - https://vuldb.com/?submit.601917 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-9.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6609 State: PUBLISHED Published: 2025-06-25T14:31:08.798Z Last Updated: 2025-06-25T14:42:14.388Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313826 - https://vuldb.com/?ctiid.313826 - https://vuldb.com/?submit.601918 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-10.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6610 State: PUBLISHED Published: 2025-06-25T15:00:13.308Z Last Updated: 2025-06-25T15:14:46.183Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Employee Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/editempprofile.php. The manipulation of the argument FirstName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313827 - https://vuldb.com/?ctiid.313827 - https://vuldb.com/?submit.601940 - https://github.com/Sp1d3rL1/CVE/issues/5 - https://itsourcecode.com/
CVE ID: CVE-2025-6611 State: PUBLISHED Published: 2025-06-25T15:31:05.727Z Last Updated: 2025-06-26T19:38:45.755Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/createBrand.php. The manipulation of the argument brandStatus leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313828 - https://vuldb.com/?ctiid.313828 - https://vuldb.com/?submit.601976 - https://github.com/Lwlej/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6612 State: PUBLISHED Published: 2025-06-25T15:31:07.817Z Last Updated: 2025-06-26T19:41:42.361Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /php_action/removeCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313829 - https://vuldb.com/?ctiid.313829 - https://vuldb.com/?submit.601977 - https://github.com/Lwlej/cve/issues/1 - https://code-projects.org/