Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-45899 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T19:55:34.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/26/superuser.html
CVE ID: CVE-2023-45901 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T19:59:02.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20in%20the%20newly%20added%20column%20of%20column%20management.md
CVE ID: CVE-2023-45902 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T19:58:20.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20in%20the%20attachment%20management%20deletion%20function.md
CVE ID: CVE-2023-45903 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T19:57:47.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20vulnerability%20in%20the%20label%20management%20deletion%20function.md
CVE ID: CVE-2023-45904 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T19:57:09.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20vulnerability%20in%20the%20variable%20management%20modification%20function.md
CVE ID: CVE-2023-45905 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T19:55:23.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20vulnerability%20in%20variable%20management%20with%20added%20functionality.md
CVE ID: CVE-2023-45906 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T19:53:58.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20in%20the%20user%20added%20function.md
CVE ID: CVE-2023-45907 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T19:07:51.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20vulnerability%20in%20the%20variable%20management%20deletion%20function.md
CVE ID: CVE-2023-45908 State: PUBLISHED Published: 2025-01-21T00:00:00 Last Updated: 2025-01-21T19:36:05.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Homarr before v0.14.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notebook widget. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://homarr.dev/ - https://github.com/ajnart/homarr - https://github.com/CosasDePuma/CVE-Research/tree/main/CVE-2023-45908
CVE ID: CVE-2023-45909 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2024-09-13T17:59:36.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: zzzcms v2.2.0 was discovered to contain an open redirect vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Num-Nine/CVE/issues/7
CVE ID: CVE-2023-45911 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2025-01-09T19:48:09.296857Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PostalBlab/Vulnerabilities/blob/main/ComScale/auth_bypass.txt - https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2023-45911
CVE ID: CVE-2023-45912 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2025-01-09T19:49:21.232033Z Vendors: n/a Products: n/a Problem Types: n/a Description: WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PostalBlab/Vulnerabilities/blob/main/ComScale/file_access.txt - https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2023-45912
CVE ID: CVE-2023-45913 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:17:47.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/mesa/mesa/-/issues/9856 - http://seclists.org/fu
: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/mesa/mesa/-/issues/9856 - http://seclists.org/fulldisclosure/2024/Jan/28 - https://seclists.org/fulldisclosure/2024/Jan/71
CVE ID: CVE-2023-45916 State: REJECTED Published: N/A Last Updated: 2024-01-29T08:54:17.116930 Description: No description available.
CVE ID: CVE-2023-45918 State: REJECTED Published: 2024-02-16T00:00:00 Last Updated: 2024-11-21T20:25:34.899894 Description: No description available.
CVE ID: CVE-2023-45919 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:17:58.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.freedesktop.org/mesa/mesa/-/issues/9858 - http://seclists.org/fulldisclosure/2024/Jan/47
CVE ID: CVE-2023-45920 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:17:59.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/155/ - http://seclists.org/fulldisclosure/2024/Jan/48
CVE ID: CVE-2023-45921 State: REJECTED Published: N/A Last Updated: 2024-01-29T08:56:35.538587 Description: No description available.
CVE ID: CVE-2023-45922 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:05.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.freedesktop.org/mesa/mesa/-/issues/9857 - http://seclists.org/fulldisclosure/2024/Jan/50 - http://seclists.org/fulldisclosure/2024/Jan/71
CVE ID: CVE-2023-45923 State: REJECTED Published: N/A Last Updated: 2024-01-30T05:43:20.115865 Description: No description available.
CVE ID: CVE-2023-45924 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:09.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.freedesktop.org/glvnd/libglvnd/-/issues/242 - http://seclists.org/fulldisclosure/2024/Jan/52 - https://gitlab.freedesktop.org/glvnd/libglvnd/-
libglvnd/-/issues/242 - http://seclists.org/fulldisclosure/2024/Jan/52 - https://gitlab.freedesktop.org/glvnd/libglvnd/-/merge_requests/295
CVE ID: CVE-2023-45925 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:10.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://midnight-commander.org/ticket/4484 - http://seclists.org/fulldisclosure/2024/Jan/53
CVE ID: CVE-2023-45926 State: REJECTED Published: N/A Last Updated: 2024-01-30T05:46:24.521344 Description: No description available.
CVE ID: CVE-2023-45927 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:15.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.jedsoft.org/lists/slang-users/2023/0000003.html - https://seclists.org/fulldisclosure/2024/Jan/55
CVE ID: CVE-2023-45928 State: REJECTED Published: N/A Last Updated: 2024-01-30T05:47:15.964590 Description: No description available.
CVE ID: CVE-2023-45929 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-11-06T15:12:01.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.jedsoft.org/lists/slang-users/2023/0000002.html - http://seclists.org/fulldisclosure/2024/Jan/57
CVE ID: CVE-2023-45930 State: REJECTED Published: N/A Last Updated: 2024-01-30T05:48:04.507734 Description: No description available.
CVE ID: CVE-2023-45931 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:25.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/mesa/mesa/-/issues/9859 - https://seclists.org/fulldisclosure/2024/Jan/71
CVE ID: CVE-2023-45932 State: REJECTED Published: N/A Last Updated: 2024-01-29T09:06:53.089075 Description: No description available.
CVE ID: CVE-2023-45935 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:31.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugreports.qt.io/browse/QTBUG-115599 - http://seclists.org/fulldisclosure/2024/Jan/61
CVE ID: CVE-2023-45951 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T16:22:30.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LyLme/lylme_spage/issues/32
CVE ID: CVE-2023-45952 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T16:20:36.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LyLme/lylme_spage/issues/33
CVE ID: CVE-2023-45955 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T19:54:05.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IoT-Fuzz/IoT-Fuzz/blob/main/Nanoleaf%20Lightstrip%20Vulnerability%20Report.pdf
CVE ID: CVE-2023-45956 State: PUBLISHED Published: 2023-10-30T00:00:00 Last Updated: 2024-09-09T20:06:29.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IoT-Fuzz/IoT-Fuzz/blob/main/Govee%20LED%20Strip%20Vulnerability%20Report.pdf
CVE ID: CVE-2023-45957 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T20:29:32.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees before 1.5.0 allows attackers to execute arbitrary web script or HTML via $e->getMessage() error mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://zigrin.com/advisories/thirty-bees-stored-cross-site-scripting-xss/ - https://github.com/thirtybees/thirtybees/commit/f5b2c1e0094ce53fded1443bab99a604ae8e2968 - https://github.com/thirtybees/thirtybees/compare/1.4.0...1.5.0
CVE ID: CVE-2023-45958 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2024-09-13T14:46:12.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zigrin.com/advisories/thirty-bees-reflected-cross-site-scripting-xss/ - https://github.com/thirtybees/thirtybees/commit/2c99464376ad7b3c95
ies/thirty-bees-reflected-cross-site-scripting-xss/ - https://github.com/thirtybees/thirtybees/commit/2c99464376ad7b3c95f220163a2411e35274c3ba
CVE ID: CVE-2023-45960 State: REJECTED Published: N/A Last Updated: 2023-11-22T15:49:15.654363 Description: No description available.
CVE ID: CVE-2023-45966 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-12T15:16:41.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/umputun/remark42/issues/1677 - https://github.com/jet-pentest/CVE-2023-45966
CVE ID: CVE-2023-45984 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-12T12:47:33.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/setLanguageCfg.md
CVE ID: CVE-2023-45985 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-10-30T19:52:55.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/setParentalRules.md
CVE ID: CVE-2023-45990 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:15:42.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PwnCYN/Wenwenai/issues/2
CVE ID: CVE-2023-45992 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-08-02T20:29:32.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certain admin activity, could allow the attacker to gain full admin privileges on the exploited system. Additional Analyst Notes: - CVE Program Container: References: - http://ruckus.com - https://server.cloudpath/ - https://server.cloudpa
yst Notes: - CVE Program Container: References: - http://ruckus.com - https://server.cloudpath/ - https://server.cloudpath/admin/enrollmentData/ - https://github.com/harry935/CVE-2023-45992 - https://support.ruckuswireless.com/security_bulletins/322
CVE ID: CVE-2023-45996 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T19:11:48.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-member_type.md - https://github.com/slims/slims9_bulian/issues/216
CVE ID: CVE-2023-45998 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-17T14:23:25.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: kodbox 1.44 is vulnerable to Cross Site Scripting (XSS). Customizing global HTML results in storing XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/fangjiuye/703fdb643db558640f23e4e7c9532348
CVE ID: CVE-2023-46001 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-09-05T14:26:29.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isom_read.c:2807:51 function in gf_isom_get_user_data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2629 - https://github.com/gpac/gpac/commit/e79b0cf7e72404750630bc01340e999f3940dbc4
CVE ID: CVE-2023-46003 State: PUBLISHED Published: 2023-10-21T00:00:00 Last Updated: 2024-09-11T18:40:15.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.i-doit.com/ - https://medium.com/%40ray.999/stored-xss-in-i-doit-pro-25-and-below-cve-2023-46003-17fb8d6fe2e9 - https://github.com/leekenghwa/CVE-2023-46003
CVE ID: CVE-2023-46004 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2024-09-13T15:12:34.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zerrr0/Zerrr0_Vulnerability/blob/main/Best%20Courier%20Management%20System%201.0/Arbitrary-File-Upload-Vulnerability.md
CVE ID: CVE-2023-46005 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2024-09-13T15:11:52.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_branch.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zerrr0/Zerrr0_Vulnerability/blob/main/Best%20Courier%20Management%20System%201.0/SQL-Injection-Vulnerability.md
CVE ID: CVE-2023-46006 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2024-09-13T15:08:51.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_user.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zerrr0/Zerrr0_Vulnerability/blob/main/Best%20Courier%20Management%20System%201.0/SQL-Injection-Vulnerability-2.md
CVE ID: CVE-2023-46007 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2024-09-13T15:08:26.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zerrr0/Zerrr0_Vulnerability/blob/main/Best%20Courier%20Management%20System%201.0/SQL-Injection-Vulnerability-3.md