Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205573 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205573
CVE ID: CVE-2022-2646 State: PUBLISHED Published: 2022-08-04T08:40:58.000Z Last Updated: 2025-04-15T14:01:19.198Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Online Admission System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8</h3><script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability i
he attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205572. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/badboycxcc/Student-Admission-Xss - https://vuldb.com/?id.205572
CVE ID: CVE-2022-2647 State: PUBLISHED Published: 2022-08-04T08:41:11.000Z Last Updated: 2025-04-14T16:00:09.089Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: jeecg-boot Problem Types: CWE-434 Description: A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205594 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
he identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/J0o1ey/p/16550583.html - https://vuldb.com/?id.205594
CVE ID: CVE-2022-2648 State: PUBLISHED Published: 2022-08-04T08:41:25.000Z Last Updated: 2025-04-15T14:01:10.345Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Multi Language Hotel Management Software Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument room_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205595. Additional Ana
n disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205595. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gdianq/Sparkz-Hotel-Management-Sqlinjection/tree/main - https://vuldb.com/?id.205595
CVE ID: CVE-2022-2650 State: PUBLISHED Published: 2022-11-24T00:00:00.000Z Last Updated: 2025-04-25T18:11:17.130Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wger-project Products: wger-project/wger Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f0d85efa-4e78-4b1d-848f-edea115af64b - https://github.com/wger-project/wger/commit/5e3167e3a2dc95836fa2607fe201524c031a2c4c
CVE ID: CVE-2022-2651 State: PUBLISHED Published: 2022-08-04T09:10:10 Last Updated: 2024-08-03T00:46:03.487Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: bookwyrm-social Products: bookwyrm-social/bookwyrm Problem Types: CWE-305 Description: Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/428eee94-f1a0-45d0-9e25-318641115550 - https://github.com/bookwyrm-social/bookwyrm/commit/7bbe42fb30a79a26115524d18b697d895563c92f - http://packetstormsecurity.com/files/168423/Bookwyrm-0.4.3-Authentication-Bypass.html
CVE ID: CVE-2022-2652 State: PUBLISHED Published: 2022-08-04T09:35:37 Last Updated: 2024-08-03T00:46:03.489Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L) Vendors: umlaeute Products: umlaeute/v4l2loopback Problem Types: CWE-134 Description: Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row). Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5 - https://github
- CVE Program Container: References: - https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5 - https://github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd
CVE ID: CVE-2022-2653 State: PUBLISHED Published: 2022-08-04T09:35:25 Last Updated: 2024-08-03T00:46:03.421Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: plankanban Products: plankanban/planka Problem Types: CWE-22 Description: With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ file, that contains the environment variable used by the web server that includes database credentials. If the web server user is root, an attacker will be able to read any file in the system. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/5dff7cf9-8bb2-4f67-a02d-b94db5009d
onal Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/5dff7cf9-8bb2-4f67-a02d-b94db5009d70 - https://github.com/plankanban/planka/commit/ac1df5201dfdaf68d37f7e1b272bc137870d7418
CVE ID: CVE-2022-2654 State: PUBLISHED Published: 2022-09-16T08:40:31.000Z Last Updated: 2025-06-05T18:18:42.406Z Vendors: Unknown Products: Classified Listing – Classified ads & Business Directory Plugin, Classified Listing Pro - Classified ads & Business Directory Plugin, Classified Listing Store & Membership Addon, Classima Core, Classima Problem Types: CWE-79 Description: The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected C
and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/845f44ca-f572-48d7-a19a-89cace0b8993
CVE ID: CVE-2022-2655 State: PUBLISHED Published: 2022-09-16T08:40:31 Last Updated: 2024-08-03T00:46:03.372Z Vendors: Unknown Products: Classified Listing Pro - Classified ads & Business Directory Plugin Problem Types: CWE-79 Description: The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/acc9675a-56f6-411a-9594-07144c2aad1b
CVE ID: CVE-2022-2656 State: PUBLISHED Published: 2022-08-04T12:30:15.000Z Last Updated: 2025-04-15T14:01:02.493Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Multi Language Hotel Management Software Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205596. Additional Analyst Notes: - CVE P
sed to the public and may be used. The identifier of this vulnerability is VDB-205596. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gdianq/Sparkz-Hotel-Management-loginpage-Sqlinjection/blob/main/README.md - https://vuldb.com/?id.205596
CVE ID: CVE-2022-2657 State: PUBLISHED Published: 2022-09-05T12:35:22 Last Updated: 2024-08-03T00:46:03.260Z Vendors: Unknown Products: Multivendor Marketplace Solution for WooCommerce – WC Marketplace Problem Types: CWE-862, CWE-352 Description: The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them and suspend vendors (reporter by the submitter) or update arbitrary order status (identified by WPScan when verifying the issue) for example. Other unauthenticated attacks are also possible, either directly or via CSRF Additional Anal
ing the issue) for example. Other unauthenticated attacks are also possible, either directly or via CSRF Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c600dd04-f6aa-430b-aefb-c4c6d554c41a
CVE ID: CVE-2022-2658 State: PUBLISHED Published: 2023-01-16T15:38:13.222Z Last Updated: 2025-04-04T19:43:55.758Z Vendors: Unknown Products: WP Spell Check Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e72fa040-3ca5-4570-9a3c-c704574b1ca3
CVE ID: CVE-2022-2660 State: PUBLISHED Published: 2022-12-13T21:26:57.865Z Last Updated: 2025-04-16T16:04:37.830Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: Industrial Automation DIALink Problem Types: CWE-321 Description: Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-02
CVE ID: CVE-2022-2661 State: PUBLISHED Published: 2022-08-16T19:52:15.575Z Last Updated: 2025-04-16T17:50:58.098Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Sequi Products: PortBloque S Problem Types: CWE-285 Description: Sequi PortBloque S has an improper authorization vulnerability, which may allow a low-privileged user to perform administrative functions using specifically crafted requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-07
CVE ID: CVE-2022-2662 State: PUBLISHED Published: 2022-08-16T19:52:40.809Z Last Updated: 2025-04-16T17:50:46.946Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Sequi Products: PortBloque S Problem Types: CWE-287 Description: Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process and gain user-level access to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-07
CVE ID: CVE-2022-2663 State: PUBLISHED Published: 2022-09-01T00:00:00 Last Updated: 2024-08-03T00:46:04.030Z Vendors: n/a Products: Linux kernel Problem Types: CWE-923 Description: An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/08/30/1 - https://lore.kernel.org/netfilter-devel/20220826045658.100360-1-dgl%40dgl.cx/T/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htm
filter-devel/20220826045658.100360-1-dgl%40dgl.cx/T/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html - https://dgl.cx/2022/08/nat-again-irc-cve-2022-2663 - https://www.youtube.com/watch?v=WIq-YgQuYCA - https://www.debian.org/security/2022/dsa-5257 - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
CVE ID: CVE-2022-2664 State: PUBLISHED Published: 2022-08-05T10:45:17.000Z Last Updated: 2025-04-14T15:59:58.626Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Private Cloud Management Platform Problem Types: CWE-287 Description: A vulnerability classified as critical has been found in Private Cloud Management Platform. Affected is an unknown function of the file /management/api/rcx_management/global_config_query of the component POST Request Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. VDB-205614 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CV
launch the attack remotely. VDB-205614 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205614
CVE ID: CVE-2022-2665 State: PUBLISHED Published: 2022-08-05T10:45:34.000Z Last Updated: 2025-04-15T14:00:53.548Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple E-Learning System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Simple E-Learning System. Affected by this vulnerability is an unknown functionality of the file classroom.php. The manipulation of the argument post_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205615. Additional An
en disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205615. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205615
CVE ID: CVE-2022-2666 State: PUBLISHED Published: 2023-01-07T21:35:27.192Z Last Updated: 2024-08-03T00:46:03.771Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Loan Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Loan Management System and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205618 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: R
used. VDB-205618 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.205618 - https://vuldb.com/?ctiid.205618 - https://github.com/cxaqhq/Loan-Management-System-Sqlinjection
CVE ID: CVE-2022-2667 State: PUBLISHED Published: 2022-08-05T10:45:49.000Z Last Updated: 2025-04-15T14:00:44.199Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Loan Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Loan Management System and classified as critical. This issue affects some unknown processing of the file delete_lplan.php. The manipulation of the argument lplan_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205619. Additional Analyst Notes
d to the public and may be used. The associated identifier of this vulnerability is VDB-205619. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cxaqhq/Loan-Management-System-Sqlinjection - https://vuldb.com/?id.205619
CVE ID: CVE-2022-2668 State: PUBLISHED Published: 2022-08-05T16:46:34 Last Updated: 2024-08-03T00:46:03.654Z Vendors: n/a Products: keycloak Problem Types: Expected Behavior Violation Description: An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2022-2668
CVE ID: CVE-2022-2669 State: PUBLISHED Published: 2022-09-16T08:40:32.000Z Last Updated: 2025-06-05T18:19:07.864Z Vendors: Unknown Products: WP Taxonomy Import Problem Types: CWE-79 Description: The WP Taxonomy Import WordPress plugin through 1.0.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/792d9f22-abf6-47b2-a247-d0cdb705cd81
CVE ID: CVE-2022-2671 State: PUBLISHED Published: 2022-08-05T11:40:15.000Z Last Updated: 2025-04-15T14:00:33.715Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Garage Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Garage Management System and classified as critical. This issue affects some unknown processing of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205655. Additional Analyst Notes: -
the public and may be used. The associated identifier of this vulnerability is VDB-205655. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205655
CVE ID: CVE-2022-2672 State: PUBLISHED Published: 2022-08-05T11:40:28.000Z Last Updated: 2025-04-15T14:00:26.655Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Garage Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Garage Management System. It has been classified as critical. Affected is an unknown function of the file createUser.php. The manipulation of the argument userName/uemail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205656. Additional Analyst N
s been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205656. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205656
CVE ID: CVE-2022-2673 State: PUBLISHED Published: 2022-08-05T11:40:42.000Z Last Updated: 2025-04-15T14:00:20.190Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Rigatur Products: Online Booking and Hotel Management System Problem Types: CWE-89 Description: A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation of the argument email/pass leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used
eads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205657 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205657
CVE ID: CVE-2022-2674 State: PUBLISHED Published: 2022-08-05T11:40:54.000Z Last Updated: 2025-04-14T15:59:52.299Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Best Fee Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Best Fee Management System. It has been rated as critical. Affected by this issue is the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-205658 is the identifier assigned to this vulnerability. Additional Analy
n disclosed to the public and may be used. VDB-205658 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205658
CVE ID: CVE-2022-2675 State: PUBLISHED Published: 2022-08-05T17:01:52.182829Z Last Updated: 2024-09-16T16:33:04.349Z Vendors: Unitree Products: Go 1 Problem Types: CWE-285 Description: Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 (using firmware version 0.1.35) can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/d0tslash/status/1555326302462394370 - https://fccid.io/2A5PE-YUSHU001/Users-Manual/User-Manual-5810729 - https://www.mybotshop.de/Datasheet/Unitree_A1_User_Manual_v1.0
ccid.io/2A5PE-YUSHU001/Users-Manual/User-Manual-5810729 - https://www.mybotshop.de/Datasheet/Unitree_A1_User_Manual_v1.0.pdf
CVE ID: CVE-2022-2676 State: PUBLISHED Published: 2022-08-05T20:20:29.000Z Last Updated: 2025-04-15T14:00:10.225Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Electronic Medical Records System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument user_email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-2
ed remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205664. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Hanfu-l/Cve-vulnerability-mining/blob/main/Electronic%20Medical%20Records%20System/Electronic%20Medical%20Records%20System-loginpage-Sqlinjection.pdf - https://vuldb.com/?id.205664