Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-44541 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-09-11T20:32:50.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/evilnapsis/inventio-lite - https://github.com/pointedsec/CVE-2024-44541/
CVE ID: CVE-2024-44542 State: PUBLISHED Published: 2024-09-18T00:00:00 Last Updated: 2024-09-18T18:58:15.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/alphandbelt/CVE-2024-44542/tree/main
CVE ID: CVE-2024-44546 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-19T19:15:16.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PowerJob/PowerJob - https://gist.github.com/jwx0539/5151f53ec497474cab6af4fa8ee6b6f7
CVE ID: CVE-2024-44549 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T18:28:46.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formGetIptv-74cd0418924247729bae905996ae8902?pvs=4
CVE ID: CVE-2024-44550 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T16:57:05.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formGetIptv-74cd0418924247729bae905996ae8902?pvs=4
CVE ID: CVE-2024-44551 State: PUBLISHED Published: 2024-08-26T00:00:00.000Z Last Updated: 2025-03-26T20:38:21.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formGetIptv-74cd0418924247729bae905996ae8902?pvs=4
CVE ID: CVE-2024-44552 State: PUBLISHED Published: 2024-08-26T00:00:00.000Z Last Updated: 2025-03-18T19:25:21.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formGetIptv-74cd0418924247729bae905996ae8902?pvs=4
CVE ID: CVE-2024-44553 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T16:59:18.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formGetIptv-74cd0418924247729bae905996ae8902?pvs=4
CVE ID: CVE-2024-44555 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T17:32:05.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-setIptvInfo-5aee8fa8b7754d319ee35027d3628f2e?pvs=4
CVE ID: CVE-2024-44556 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T19:19:59.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-setIptvInfo-5aee8fa8b7754d319ee35027d3628f2e?pvs=4
CVE ID: CVE-2024-44557 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T19:07:21.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-setIptvInfo-5aee8fa8b7754d319ee35027d3628f2e?pvs=4
CVE ID: CVE-2024-44558 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T13:55:03.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-setIptvInfo-5aee8fa8b7754d319ee35027d3628f2e?pvs=4
CVE ID: CVE-2024-44563 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T12:50:09.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-getIptvInfo-d15d44b770e24213a8dcb13a4812e3f4?pvs=4
CVE ID: CVE-2024-44565 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-26T16:18:54.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-form_fast_setting_internet_set-fe072267132d42be935ea4d7a53f7369?pvs=4
CVE ID: CVE-2024-44570 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-09-11T20:28:10.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/ - http://system-on-chip.com
CVE ID: CVE-2024-44571 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-09-11T20:30:41.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/ - http://system-on-chip.com
CVE ID: CVE-2024-44572 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-09-11T20:25:32.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/ - http://system-on-chip.com
CVE ID: CVE-2024-44573 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-11-01T18:28:57.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/ - http://system-on-chip.com
CVE ID: CVE-2024-44574 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-09-11T19:25:28.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/ - http://system-on-chip.com
CVE ID: CVE-2024-44575 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-11-25T17:40:34.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/ - http://system-on-chip.com
CVE ID: CVE-2024-44577 State: PUBLISHED Published: 2024-09-11T00:00:00 Last Updated: 2024-09-11T19:15:27.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/ - http://system-on-chip.com
CVE ID: CVE-2024-44587 State: PUBLISHED Published: 2024-09-05T00:00:00 Last Updated: 2024-09-05T14:06:53.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: itsourcecode Alton Management System 1.0 is vulnerable to SQL Injection in /noncombo_save.php via the "menu" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Lejeremiah/excavation/blob/main/cms-sql1.md
CVE ID: CVE-2024-44589 State: PUBLISHED Published: 2024-09-18T00:00:00 Last Updated: 2024-09-19T17:03:58.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Xshacry/iot-vuln/blob/main/d-link/dcs-935l/readme.md
CVE ID: CVE-2024-44610 State: PUBLISHED Published: 2024-10-01T00:00:00 Last Updated: 2024-10-02T05:19:02.354956 Vendors: n/a Products: n/a Problem Types: n/a Description: PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cve.mahi.be/peak_pcan_dr/ - https://github.com/BertoldVdb/PcanExploit
CVE ID: CVE-2024-44623 State: PUBLISHED Published: 2024-09-16T00:00:00 Last Updated: 2024-09-16T17:16:59.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/TuomoKu/SPX-GC - https://github.com/TuomoKu/SPX-GC/blob/v.1.3.0/routes/routes-api.js#L39 - https://github.com/merbinr/CVE-2024-44623
CVE ID: CVE-2024-44625 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-20T20:20:11.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gogs.io/ - https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/
CVE ID: CVE-2024-44630 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T17:03:32.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country, state, city, padd, cadd, and gender. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/student-record-system-php - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44630.md
CVE ID: CVE-2024-44632 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T17:05:23.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/student-record-system-php - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44632.md
CVE ID: CVE-2024-44633 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T16:57:38.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/student-record-system-php - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44633.md
CVE ID: CVE-2024-44635 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T17:06:08.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/student-record-system-php - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44635.md
CVE ID: CVE-2024-44636 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T17:04:30.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/student-record-system-php
CVE ID: CVE-2024-44639 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T17:01:41.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/student-record-system-php - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44639.md
CVE ID: CVE-2024-44640 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T17:00:37.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/student-record-system-php - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44640.md
CVE ID: CVE-2024-44641 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T17:04:52.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/small-crm-php/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44641.md
CVE ID: CVE-2024-44644 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T17:03:54.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/small-crm-php/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44644.md
CVE ID: CVE-2024-44647 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T17:02:55.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/small-crm-php/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44647.md
CVE ID: CVE-2024-44648 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T17:02:19.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/small-crm-php/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44648.md
CVE ID: CVE-2024-44651 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:21:34.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44651.md
CVE ID: CVE-2024-44652 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T19:04:41.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44652.md
CVE ID: CVE-2024-44653 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:25:42.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44653.md
CVE ID: CVE-2024-44654 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:28:47.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/complaint-management-sytem - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44654.md
CVE ID: CVE-2024-44655 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:29:34.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/complaint-management-sytem - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44655.md
CVE ID: CVE-2024-44657 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:27:35.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/complaint-management-sytem - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44657.md
CVE ID: CVE-2024-44658 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:30:20.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/complaint-management-sytem - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44658.md
CVE ID: CVE-2024-44659 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:05:08.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/shopping-portal-free-download/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44659.md
CVE ID: CVE-2024-44660 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:31:45.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/shopping-portal-free-download/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44660.md
CVE ID: CVE-2024-44661 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T19:59:35.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/shopping-portal-free-download/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44661.md
CVE ID: CVE-2024-44662 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:40:23.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/shopping-portal-free-download/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44662.md
CVE ID: CVE-2024-44663 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:30:59.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/shopping-portal-free-download/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44663.md
CVE ID: CVE-2024-44664 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-17T20:04:27.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/shopping-portal-free-download/ - https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44664.md