Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10323 State: PUBLISHED Published: 2024-11-12T06:48:15.375Z Last Updated: 2024-11-12T11:22:18.946Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jetmonsters Products: JetWidgets For Elementor Problem Types: CWE-79 Description: The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.0.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Addit
ccess and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e4b4e4ba-ab66-496a-b77f-8dd77cd16ea8?source=cve - https://wordpress.org/plugins/jetwidgets-for-elementor/#developers - https://plugins.trac.wordpress.org/changeset/3184475/
CVE ID: CVE-2024-10324 State: PUBLISHED Published: 2025-01-24T13:40:58.082Z Last Updated: 2025-01-27T14:54:48.023Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: rometheme Products: RomethemeKit For Elementor Problem Types: CWE-1230 Description: The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data. Additional Analyst Notes: - CISA ADP Vulnrichme
d above, to extract sensitive private, pending, and draft template data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cd726b20-75c9-408e-86fc-061db591a9db?source=cve - https://plugins.trac.wordpress.org/changeset/3220079/rometheme-for-elementor
CVE ID: CVE-2024-10325 State: PUBLISHED Published: 2024-11-08T11:31:07.444Z Last Updated: 2024-11-08T14:05:29.685Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brainstormforce Products: Elementor Header & Footer Builder Problem Types: CWE-79 Description: The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.6.45 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user access
s, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7773fd3a-2417-415e-97b0-735e99e62097?source=cve - https://wordpress.org/plugins/header-footer-elementor/#developers - https://plugins.trac.wordpress.org/changeset/3182862/
CVE ID: CVE-2024-10326 State: PUBLISHED Published: 2025-03-08T12:21:31.426Z Last Updated: 2025-03-11T16:07:02.799Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: rometheme Products: RomethemeKit For Elementor Problem Types: CWE-862 Description: The RomethemeKit For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_options and reset_widgets functions in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify plugin settings or reset plugin widgets to their default state (all enabled). NOTE: This
vel access and above, to modify plugin settings or reset plugin widgets to their default state (all enabled). NOTE: This vulnerability was partially fixed in version 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/230b3f2f-44cf-46eb-8e6a-3c52f2ea2fb9?source=cve - https://plugins.trac.wordpress.org/changeset/3231792/rometheme-for-elementor - https://plugins.trac.wordpress.org/changeset/3220079/rometheme-for-elementor
CVE ID: CVE-2024-10327 State: PUBLISHED Published: 2024-10-24T20:17:59.360Z Last Updated: 2024-10-25T15:22:54.766Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Okta Products: Okta Verify for iOS Problem Types: CWE-287 Description: A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects an option, both options allow the authentication to succeed. The ContextExtension feature is one of several push mechanisms availabl
oth options allow the authentication to succeed. The ContextExtension feature is one of several push mechanisms available when using Okta Verify Push on iOS devices. The vulnerable flows include: * When a user is presented with a notification on a locked screen, the user presses on the notification directly and selects their reply without unlocking the device; * When a user is presented with a notification on the home screen and drags the notification down and selects their reply; * When an Apple Watch is used to reply directly to a notification. A pre-condition for this vulnerability is that the user must have enrolled in Okta Verify while the Okta customer was using Okta Classic. This appl
lnerability is that the user must have enrolled in Okta Verify while the Okta customer was using Okta Classic. This applies irrespective of whether the organization has since upgraded to Okta Identity Engine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://trust.okta.com/security-advisories/okta-verify-for-ios-cve-2024-10327/ - https://help.okta.com/en-us/content/topics/releasenotes/okta-verify-release-notes.htm#panel2
CVE ID: CVE-2024-10329 State: PUBLISHED Published: 2024-11-05T13:55:29.131Z Last Updated: 2024-11-05T14:18:36.989Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: g5theme Products: Ultimate Bootstrap Elements for Elementor Problem Types: CWE-200 Description: The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ube_get_page_templates' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the contents of templates that are private. Additional Analyst Notes: - CISA
above, to extract sensitive data including the contents of templates that are private. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3af83ec2-9ebb-4cca-8523-8fe9b1517825?source=cve - https://plugins.trac.wordpress.org/browser/ultimate-bootstrap-elements-for-elementor/trunk/inc/functions/core.php#L239 - https://plugins.trac.wordpress.org/changeset/3176562/
CVE ID: CVE-2024-10330 State: PUBLISHED Published: 2025-03-20T10:10:28.504Z Last Updated: 2025-10-15T12:49:26.472Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-862 Description: In lunary-ai/lunary version 1.5.6, the `/v1/evaluators/` endpoint lacks proper access control, allowing any user associated with a project to fetch all evaluator data regardless of their role. This vulnerability permits low-privilege users to access potentially sensitive evaluation data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/598ecd65-1723-4fb7-a9aa-9c4f56a5a2aa - https://gi
tes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/598ecd65-1723-4fb7-a9aa-9c4f56a5a2aa - https://github.com/lunary-ai/lunary/commit/8ba1b8ba2c2c30b1cec30eb5777c1fda670cbbfc
CVE ID: CVE-2024-10331 State: PUBLISHED Published: 2024-10-24T11:00:07.775Z Last Updated: 2024-10-24T13:29:40.548Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Vehicle Record System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.281675 - https://vuldb.com/?ctiid.281675 - https://vuldb.com/?submit.427426 - https://phpgurukul.com/
CVE ID: CVE-2024-10332 State: PUBLISHED Published: 2024-10-24T12:14:32.678Z Last Updated: 2024-10-24T13:42:19.261Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Janto Products: Janto Problem Types: CWE-79 Description: A Cross-Site Scripting vulnerability has been found in Janto v4.3r11 from Impronta. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the endpoint “/abonados/public/janto/main.php”. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-janto-impronta - https://i
: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-janto-impronta - https://impronta.es/
CVE ID: CVE-2024-10334 State: PUBLISHED Published: 2025-02-10T15:02:58.369Z Last Updated: 2025-02-12T15:44:32.063Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: ABB Products: System 800xA Problem Types: CWE-256 Description: A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used. An attacker who successfully exploited the vulnerability could, in the worst case scenario, stop or manipulate the video feed. This issue affects System 800xA: 5.1.X; System 800xA: 6.0.3.X; System 800xA: 6.1.1.X; System 800xA: 6.2.X. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/lib
.1.1.X; System 800xA: 6.2.X. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=7PAA012159&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-10335 State: PUBLISHED Published: 2024-10-24T16:31:04.836Z Last Updated: 2024-11-07T18:52:14.656Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Garbage Collection Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "username
has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "username" to be affected. But it must be assumed that the parameter "password" is affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.281680 - https://vuldb.com/?ctiid.281680 - https://vuldb.com/?submit.427439 - https://github.com/tang-0717/VUL/blob/main/Garbage-Collection-Management-System-01.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-10336 State: PUBLISHED Published: 2024-10-24T16:31:06.014Z Last Updated: 2024-11-07T18:50:28.803Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodeHero Products: Clothes Recommendation System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.281681 - https://vuldb.com/?ctiid.281681 - https://vuldb.com/?submit.427442
CVE ID: CVE-2024-10337 State: PUBLISHED Published: 2024-10-24T18:00:06.137Z Last Updated: 2024-10-24T18:18:48.243Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodeHero Products: Clothes Recommendation System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.281682 - https://vuldb.com/?ctiid.281682 - https://vuldb.com/?submit.427443
CVE ID: CVE-2024-10338 State: PUBLISHED Published: 2024-10-24T18:00:07.513Z Last Updated: 2024-10-24T18:17:40.765Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodeHero Products: Clothes Recommendation System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.281683 - https://vuldb.com/?ctiid.281683 - https://vuldb.com/?submit.427447
CVE ID: CVE-2024-10339 State: REJECTED Published: N/A Last Updated: 2025-02-19T22:15:46.483Z Description: No description available.
CVE ID: CVE-2024-10340 State: PUBLISHED Published: 2024-11-05T02:04:03.990Z Last Updated: 2024-11-05T13:30:54.606Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cmorillas1 Products: Shortcodes Blocks Creator Ultimate Problem Types: CWE-79 Description: The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'scu' shortcode in versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute when
d attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9a9d6c71-98ce-4fa7-817a-43e4f3dc0602?source=cve - https://plugins.trac.wordpress.org/browser/ultimate-shortcodes-creator/trunk/frontend/class-frontend.php?rev=2338595#L163 - https://plugins.trac.wordpress.org/changeset/3181163/ultimate-shortcodes-creator#file0
CVE ID: CVE-2024-10341 State: PUBLISHED Published: 2024-10-25T07:37:57.703Z Last Updated: 2024-10-25T20:24:06.158Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: tezzeract Products: League of Legends Shortcodes Problem Types: CWE-89 Description: The League of Legends Shortcodes plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level and above permissions to append additional SQL queries into already exi
r authenticated attackers with contributor-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/22ddafad-9214-4d32-9fc3-3f3c759633ad?source=cve - https://plugins.trac.wordpress.org/browser/league-of-legends-shortcodes/trunk/lol-shortcodes.php?rev=934346#L101
CVE ID: CVE-2024-10342 State: PUBLISHED Published: 2024-10-25T07:37:58.443Z Last Updated: 2024-10-25T20:25:51.703Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tezzeract Products: League of Legends Shortcodes Problem Types: CWE-79 Description: The League of Legends Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user access
ontributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/45e96aa3-97bb-4774-a1b5-5f0a7b18293e?source=cve - https://plugins.trac.wordpress.org/browser/league-of-legends-shortcodes/trunk/lol-shortcodes.php?rev=934346#L67
CVE ID: CVE-2024-10343 State: PUBLISHED Published: 2024-10-25T08:34:40.747Z Last Updated: 2024-10-25T15:19:29.130Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: beekyoshida Products: Beek Widget Extention Problem Types: CWE-79 Description: The Beek Widget Extention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 0.9.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an inject
evel and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4afc8de7-0d7e-4dee-972e-3eb707cd7b2b?source=cve - https://plugins.trac.wordpress.org/browser/beek-widget-extention/trunk/inc/call-to-action.php?rev=1249743#L135
CVE ID: CVE-2024-10344 State: PUBLISHED Published: 2024-11-11T14:08:11.753Z Last Updated: 2025-01-29T19:41:20.345Z Vendors: Helix Products: Helix Core Problem Types: CWE-400 Description: In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the refuse function was identified. Reported by Karol Więsek. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.perforce.com/s/detail/a91PA000001SZOrYAO
CVE ID: CVE-2024-10345 State: PUBLISHED Published: 2024-11-11T13:28:09.254Z Last Updated: 2025-01-29T19:39:33.787Z Vendors: Helix Products: Helix Core Problem Types: CWE-400 Description: In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Karol Więsek. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.perforce.com/s/detail/a91PA000001SZQTYA4
CVE ID: CVE-2024-10347 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:16.519Z Description: No description available.
CVE ID: CVE-2024-10348 State: PUBLISHED Published: 2024-10-24T22:00:06.522Z Last Updated: 2024-10-25T20:52:18.773Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Best House Rental Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?page=tenants of the component Manage Tenant Details. The manipulation of the argument Last Name/First Name/Middle Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be
site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only shows the field "Last Name" to be affected. Other fields might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.281697 - https://vuldb.com/?ctiid.281697 - https://vuldb.com/?submit.427471 - https://github.com/will121351/wenqin.webray.com.cn/blob/main/CVE-project/house-rental-management-system.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-10349 State: PUBLISHED Published: 2024-10-24T22:00:09.097Z Last Updated: 2024-10-25T20:53:03.398Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Best House Rental Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected by this issue is the function delete_tenant of the file /ajax.php?action=delete_tenant. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.281696 - https://vuldb.com/?ctiid.281696 - https://vuldb.com/?submit.427472 - https://github.com/will121351/wenqin.webray.com.cn/blob/main/CVE-project/house-rentalmanagement-system1.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-10350 State: PUBLISHED Published: 2024-10-24T23:00:06.044Z Last Updated: 2024-10-25T20:50:53.603Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Hospital Management System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.28
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.281698 - https://vuldb.com/?ctiid.281698 - https://vuldb.com/?submit.427705 - https://github.com/RTio7/cve/issues/1 - https://code-projects.org/