Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6935 State: PUBLISHED Published: 2024-07-21T02:00:05.241Z Last Updated: 2024-08-01T21:45:38.360Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: formtools.org Products: Form Tools Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1. This vulnerability affects unknown code of the file /admin/clients/ of the component User Settings Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-271990 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclo
sed. VDB-271990 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271990 - https://vuldb.com/?ctiid.271990 - https://vuldb.com/?submit.372317 - https://github.com/DeepMountains/Mirage/blob/main/CVE2-1.md
CVE ID: CVE-2024-6936 State: PUBLISHED Published: 2024-07-21T03:31:03.662Z Last Updated: 2024-08-01T21:45:38.305Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: formtools.org Products: Form Tools Problem Types: CWE-94 Description: A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1. This issue affects some unknown processing of the file /admin/settings/index.php?page=accounts of the component Setting Handler. The manipulation of the argument Page Theme leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VD
ely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271991. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271991 - https://vuldb.com/?ctiid.271991 - https://vuldb.com/?submit.372318 - https://github.com/DeepMountains/Mirage/blob/main/CVE2-2.md
CVE ID: CVE-2024-6937 State: PUBLISHED Published: 2024-07-21T04:00:06.431Z Last Updated: 2024-08-01T21:45:38.437Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:P/I:N/A:N) Vendors: formtools.org Products: Form Tools Problem Types: CWE-73 Description: A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1. Affected is the function curl_exec of the file /admin/forms/option_lists/edit.php of the component Import Option List. The manipulation of the argument url leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271992. NOTE: The vendo
it has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271992. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271992 - https://vuldb.com/?ctiid.271992 - https://vuldb.com/?submit.372602 - https://github.com/DeepMountains/Mirage/blob/main/CVE2-3.md
CVE ID: CVE-2024-6938 State: PUBLISHED Published: 2024-07-21T04:31:04.115Z Last Updated: 2024-08-01T21:45:38.384Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: SiYuan Problem Types: CWE-79 Description: A vulnerability has been found in SiYuan 3.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file PDF.js of the component PDF Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271993 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
-271993 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271993 - https://vuldb.com/?ctiid.271993 - https://vuldb.com/?submit.372629 - https://github.com/siyuan-note/siyuan/issues/11650 - https://github.com/siyuan-note/siyuan/issues/11949
CVE ID: CVE-2024-6939 State: PUBLISHED Published: 2024-07-21T05:00:05.176Z Last Updated: 2024-08-01T21:45:38.464Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Xinhu Products: RockOA Problem Types: CWE-79 Description: A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271994 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Prog
B-271994 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271994 - https://vuldb.com/?ctiid.271994 - https://vuldb.com/?submit.372744 - https://github.com/rainrocka/xinhu/issues/7
CVE ID: CVE-2024-6940 State: PUBLISHED Published: 2024-07-21T05:31:07.684Z Last Updated: 2024-08-01T21:45:38.431Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: DedeCMS Problem Types: CWE-94 Description: A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271995. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional A
y is VDB-271995. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271995 - https://vuldb.com/?ctiid.271995 - https://vuldb.com/?submit.372810 - https://gitee.com/fushuling/cve/blob/master/dedeCMS%20V5.7.114%20article_template_rand.php%20code%20injection.md
CVE ID: CVE-2024-6941 State: PUBLISHED Published: 2024-07-21T06:00:07.463Z Last Updated: 2024-08-01T21:45:38.356Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: ThinkSAAS Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in ThinkSAAS 3.7.0. This issue affects some unknown processing of the file app/system/action/do.php. The manipulation of the argument site_title/site_subtitle/site_key/site_desc/site_url/site_email/site_icp leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272063
exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272063. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272063 - https://vuldb.com/?ctiid.272063 - https://vuldb.com/?submit.373282 - https://github.com/thinksaas/ThinkSAAS/issues/36
CVE ID: CVE-2024-6942 State: PUBLISHED Published: 2024-07-21T06:31:04.313Z Last Updated: 2024-08-01T21:45:38.332Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: ThinkSAAS Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in ThinkSAAS 3.7.0. Affected is an unknown function of the file app/system/action/anti.php of the component Admin Panel Security Center. The manipulation of the argument ip/email/phone leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272064. Additional Analyst Notes: -
isclosed to the public and may be used. The identifier of this vulnerability is VDB-272064. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272064 - https://vuldb.com/?ctiid.272064 - https://vuldb.com/?submit.373289 - https://github.com/thinksaas/ThinkSAAS/issues/37
CVE ID: CVE-2024-6943 State: PUBLISHED Published: 2024-07-21T07:00:06.788Z Last Updated: 2024-08-01T21:45:38.359Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ZhongBangKeJi Products: CRMEB Problem Types: CWE-502 Description: A vulnerability has been found in ZhongBangKeJi CRMEB up to 5.4.0 and classified as critical. Affected by this vulnerability is the function downloadImage of the file app/services/product/product/CopyTaobaoServices.php. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272065 was assigned to this vulnerability. NOTE: The vendor was contacted earl
ublic and may be used. The identifier VDB-272065 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272065 - https://vuldb.com/?ctiid.272065 - https://vuldb.com/?submit.374394 - https://gist.github.com/J1rrY-learn/e15a1926a3b5a2b8805a15cb95eff1d7
CVE ID: CVE-2024-6944 State: PUBLISHED Published: 2024-07-21T07:31:04.139Z Last Updated: 2024-08-01T21:45:38.367Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ZhongBangKeJi Products: CRMEB Problem Types: CWE-502 Description: A vulnerability was found in ZhongBangKeJi CRMEB up to 5.4.0 and classified as critical. Affected by this issue is the function get_image_base64 of the file PublicController.php. The manipulation of the argument file leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-272066 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosu
d. VDB-272066 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272066 - https://vuldb.com/?ctiid.272066 - https://vuldb.com/?submit.374413 - https://gist.github.com/J1rrY-learn/93a0cf71894570f4eb39344161beb44c
CVE ID: CVE-2024-6945 State: PUBLISHED Published: 2024-07-21T08:00:06.875Z Last Updated: 2024-08-01T21:45:38.371Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Flute Products: CMS Problem Types: CWE-434 Description: A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272067. Add
oit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272067. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272067 - https://vuldb.com/?ctiid.272067 - https://vuldb.com/?submit.375189 - https://github.com/DeepMountains/Mirage/blob/main/CVE5-1.md
CVE ID: CVE-2024-6946 State: PUBLISHED Published: 2024-07-21T08:31:03.888Z Last Updated: 2024-08-01T21:45:38.345Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Flute Products: CMS Problem Types: CWE-94 Description: A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been declared as critical. This vulnerability affects unknown code of the file /admin/pages/list. The manipulation of the argument blocks leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272068. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
nerability is VDB-272068. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272068 - https://vuldb.com/?ctiid.272068 - https://vuldb.com/?submit.375214 - https://github.com/DeepMountains/Mirage/blob/main/CVE5-2.md
CVE ID: CVE-2024-6947 State: PUBLISHED Published: 2024-07-21T09:00:07.017Z Last Updated: 2024-08-01T21:45:38.384Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Flute Products: CMS Problem Types: CWE-94 Description: A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been rated as critical. This issue affects the function replaceContent of the file app/Core/Support/ContentParser.php of the component Notification Handler. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272069 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichmen
be used. The identifier VDB-272069 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272069 - https://vuldb.com/?ctiid.272069 - https://vuldb.com/?submit.376785 - https://github.com/DeepMountains/Mirage/blob/main/CVE5-3.md
CVE ID: CVE-2024-6948 State: PUBLISHED Published: 2024-07-21T09:31:04.462Z Last Updated: 2024-08-01T21:45:38.430Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Gargaj Products: wuhu Problem Types: CWE-434 Description: A vulnerability classified as critical has been found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected is an unknown function of the file /slideeditor.php of the component Slide Editor. The manipulation of the argument newSlideFile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefo
been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-272070 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272070 - https://vuldb.com/?ctiid.272070 - https://vuldb.com/?submit.374846 - https://github.com/DeepMountains/Mirage/blob/main/CVE4-1.md
CVE ID: CVE-2024-6949 State: PUBLISHED Published: 2024-07-21T10:00:05.983Z Last Updated: 2024-08-01T21:45:38.331Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Gargaj Products: wuhu Problem Types: CWE-22 Description: A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?edit=News. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releas
blic and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-272071. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272071 - https://vuldb.com/?ctiid.272071 - https://vuldb.com/?submit.375146 - https://github.com/DeepMountains/Mirage/blob/main/CVE4-2.md
CVE ID: CVE-2024-6950 State: PUBLISHED Published: 2024-07-21T10:31:03.629Z Last Updated: 2024-08-01T21:45:38.358Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Prain Problem Types: CWE-94 Description: A vulnerability, which was classified as critical, has been found in Prain up to 1.3.0. Affected by this issue is some unknown functionality of the file /?import of the component HTTP POST Request Handler. The manipulation of the argument file leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272072. Additional Analyst Notes: - CISA ADP Vulnrichment:
and may be used. The identifier of this vulnerability is VDB-272072. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272072 - https://vuldb.com/?ctiid.272072 - https://vuldb.com/?submit.375244 - https://gist.github.com/J1rrY-learn/c5818d700476c4debcf8a334a5c9c243
CVE ID: CVE-2024-6951 State: PUBLISHED Published: 2024-07-21T11:00:05.615Z Last Updated: 2024-08-01T21:45:38.328Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Online Book Store System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admin_delete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272073 was assigned to this vulnerability. Additional Analyst N
closed to the public and may be used. The identifier VDB-272073 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272073 - https://vuldb.com/?ctiid.272073 - https://vuldb.com/?submit.375246 - https://github.com/Xu-Mingming/cve/blob/main/sql2.md
CVE ID: CVE-2024-6952 State: PUBLISHED Published: 2024-07-21T11:31:03.948Z Last Updated: 2024-08-01T21:45:38.329Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: University Management System Problem Types: CWE-89 Description: A vulnerability has been found in itsourcecode University Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view_single_result.php?vr=123321&vn=mirage. The manipulation of the argument seme leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-272074 is the identifier assigned to this vulnerability. Additional
as been disclosed to the public and may be used. VDB-272074 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272074 - https://vuldb.com/?ctiid.272074 - https://vuldb.com/?submit.376865 - https://github.com/DeepMountains/Mirage/blob/main/CVE6-1.md
CVE ID: CVE-2024-6953 State: PUBLISHED Published: 2024-07-21T12:00:06.475Z Last Updated: 2024-08-01T21:45:38.350Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Tailoring Management System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sms.php. The manipulation of the argument customer leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272075. Additional Analyst Notes: - CISA ADP Vulnric
may be used. The associated identifier of this vulnerability is VDB-272075. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272075 - https://vuldb.com/?ctiid.272075 - https://vuldb.com/?submit.376879 - https://github.com/333-uit/CVE/issues/1
CVE ID: CVE-2024-6954 State: PUBLISHED Published: 2024-07-21T12:31:04.246Z Last Updated: 2024-08-01T21:45:38.354Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file sort1.php. The manipulation of the argument position leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272077 was assigned to this vulnerability. Additional Anal
n disclosed to the public and may be used. The identifier VDB-272077 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272077 - https://vuldb.com/?ctiid.272077 - https://vuldb.com/?submit.377340 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-11.md
CVE ID: CVE-2024-6955 State: PUBLISHED Published: 2024-07-21T13:00:06.737Z Last Updated: 2024-08-01T21:45:38.438Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file sort2.php. The manipulation of the argument qualification leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272076. Additional Analyst Notes: - CISA ADP
to the public and may be used. The identifier of this vulnerability is VDB-272076. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272076 - https://vuldb.com/?ctiid.272076 - https://vuldb.com/?submit.377341 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-12.md
CVE ID: CVE-2024-6956 State: PUBLISHED Published: 2024-07-21T14:00:06.442Z Last Updated: 2024-08-01T21:45:38.360Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: University Management System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode University Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view_cgpa.php. The manipulation of the argument VR/VN leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-272078 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-272078 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272078 - https://vuldb.com/?ctiid.272078 - https://vuldb.com/?submit.377754 - https://github.com/DeepMountains/Mirage/blob/main/CVE6-2.md
CVE ID: CVE-2024-6957 State: PUBLISHED Published: 2024-07-21T14:31:04.196Z Last Updated: 2024-08-01T21:45:38.350Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: University Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. This affects an unknown part of the file functions.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272079. Additional Analy