Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248951. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248951 - https://vuldb.com/?ctiid.248951 - https://github.com/laoquanshi/heishou/blob/main/niv%20-SQL - https://github.com/laoquanshi/heishou/blob/main/sqlmap.png
CVE ID: CVE-2023-7100 State: PUBLISHED Published: 2023-12-25T03:00:05.608Z Last Updated: 2025-03-04T16:38:07.588Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/bwdates-report-details.php. The manipulation of the argument fdate/tdate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248952 - https://vuldb.com/?ctiid.248952 - https://vuldb.com/?submit.256861 - https://medium.com/@2839549219ljk/restaurant-table-booking-system-sql-injection-vulnerability-30708cfabe03 - https://phpgurukul.com/
CVE ID: CVE-2023-7101 State: PUBLISHED Published: 2023-12-24T21:34:46.527Z Last Updated: 2025-10-21T23:05:29.481Z Vendors: Douglas Wilson Products: Spreadsheet::ParseExcel Problem Types: CWE-95 Description: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
within the Excel parsing logic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md - https://https://www.cve.org/CVERecord?id=CVE-2023-7101 - https://https://metacpan.org/dist/Spreadsheet-ParseExcel - https://https://github.com/haile01/perl_spreadsheet_excel_rce_poc - https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171 - http://www.openwall.com/lists/oss-security/2023/12/29/4 - https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html - https://https://github.com/jmcna
ity/2023/12/29/4 - https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html - https://https://github.com/jmcnamara/spreadsheet-parseexcel/commit/bd3159277e745468e2c553417b35d5d7dc7405bc - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/ - https://security.metacpan.org/2024/02/10/vulnerable-spreadsheet-parsing-modules.html
CVE ID: CVE-2023-7102 State: PUBLISHED Published: 2023-12-24T21:47:20.453Z Last Updated: 2024-08-02T08:50:08.291Z Vendors: Barracuda Networks Inc. Products: Barracuda ESG Appliance Problem Types: CWE-1104 Description: Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic. Additional Analyst Notes: - CVE Program Container: References: - https://www.barracuda.com/company/legal/esg-vulnerability - https://www.cve.org/CVERecord?id=CVE-2023-7101 - https://metacpan.org/dist/Spreadsheet-ParseE
/legal/esg-vulnerability - https://www.cve.org/CVERecord?id=CVE-2023-7101 - https://metacpan.org/dist/Spreadsheet-ParseExcel - https://github.com/haile01/perl_spreadsheet_excel_rce_poc - https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md
CVE ID: CVE-2023-7103 State: PUBLISHED Published: 2024-03-05T12:57:32.926Z Last Updated: 2024-08-02T19:42:43.873Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ZKSoftware Biometric Security Solutions Products: UFace 5 Problem Types: CWE-305 Description: Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass.This issue affects UFace 5: through 12022024. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-0173
CVE ID: CVE-2023-7104 State: PUBLISHED Published: 2023-12-25T21:00:05.997Z Last Updated: 2025-11-03T21:50:49.278Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SQLite Products: SQLite3 Problem Types: CWE-122 Description: A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999. Additional Analyst Notes: - CVE Program Container: Refere
The associated identifier of this vulnerability is VDB-248999. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248999 - https://vuldb.com/?ctiid.248999 - https://sqlite.org/forum/forumpost/5bcbf4571c - https://sqlite.org/src/info/0e4e7a05c4204b47 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/ - https://security.netapp.com/advisory/ntap-20240112-0008/
CVE ID: CVE-2023-7105 State: PUBLISHED Published: 2023-12-25T22:31:04.133Z Last Updated: 2024-08-27T14:31:00.783Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-89 Description: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249000. Additional Analyst Notes: - CVE Program Container: - CISA
be used. The identifier of this vulnerability is VDB-249000. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249000 - https://vuldb.com/?ctiid.249000 - https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%201.md
CVE ID: CVE-2023-7106 State: PUBLISHED Published: 2023-12-25T23:00:06.432Z Last Updated: 2024-08-26T14:52:32.045Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-89 Description: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file product_details.php?prod_id=11. The manipulation of the argument prod_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249001 was assigned to this vulnerability. Additional Analys
disclosed to the public and may be used. The identifier VDB-249001 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249001 - https://vuldb.com/?ctiid.249001 - https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%202.md
CVE ID: CVE-2023-7107 State: PUBLISHED Published: 2023-12-25T23:31:04.346Z Last Updated: 2024-08-14T18:33:35.890Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-89 Description: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file user_signup.php. The manipulation of the argument firstname/middlename/email/address/contact/username leads to sql injection. The attack may be launched remotely. VDB-249002 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA AD
DB-249002 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249002 - https://vuldb.com/?ctiid.249002 - https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%203.md
CVE ID: CVE-2023-7108 State: PUBLISHED Published: 2023-12-26T00:00:07.088Z Last Updated: 2024-08-02T08:50:08.236Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknown part of the file user_signup.php. The manipulation of the argument firstname with the input <video/src=x onerror=alert(document.domain)> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability i
emotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249003. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.249003 - https://vuldb.com/?ctiid.249003 - https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20Stored%20Cross-site%20Scripting.md
CVE ID: CVE-2023-7109 State: PUBLISHED Published: 2023-12-26T01:31:04.249Z Last Updated: 2024-08-15T17:53:41.116Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Library Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249004. Additional Analyst Notes: - CVE Program Container: - CI
may be used. The identifier of this vulnerability is VDB-249004. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249004 - https://vuldb.com/?ctiid.249004 - https://github.com/h4md153v63n/CVEs/blob/main/Library-Management-System/Library-Management-System_SQL_Injection-1.md
CVE ID: CVE-2023-7110 State: PUBLISHED Published: 2023-12-26T02:00:06.004Z Last Updated: 2024-08-02T08:50:08.253Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Library Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249005 was assigned to this vulnerability. Additional Analyst Notes: - CISA
public and may be used. The identifier VDB-249005 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.249005 - https://vuldb.com/?ctiid.249005 - https://github.com/h4md153v63n/CVEs/blob/main/Library-Management-System/Library-Management-System_SQL_Injection-2.md
CVE ID: CVE-2023-7111 State: PUBLISHED Published: 2023-12-26T02:31:04.657Z Last Updated: 2024-09-09T18:24:01.409Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Library Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is an unknown function of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249006 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program C
and may be used. VDB-249006 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249006 - https://vuldb.com/?ctiid.249006 - https://github.com/h4md153v63n/CVEs/blob/main/Library-Management-System/Library-Management-System_SQL_Injection-3.md
CVE ID: CVE-2023-7113 State: PUBLISHED Published: 2023-12-29T12:46:13.932Z Last Updated: 2024-08-02T08:50:08.283Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-79 Description: Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-7114 State: PUBLISHED Published: 2023-12-29T12:46:22.501Z Last Updated: 2024-09-09T17:28:54.020Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-74 Description: Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-7115 State: PUBLISHED Published: 2024-02-27T08:30:28.323Z Last Updated: 2025-03-27T14:32:09.749Z Vendors: Unknown Products: Page Builder: Pagelayer Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Page Builder: Pagelayer WordPress plugin before 1.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/6ddd1a9e-3f96-4020-9b2b-f818a4d5ba58/
CVE ID: CVE-2023-7116 State: PUBLISHED Published: 2023-12-27T15:31:03.813Z Last Updated: 2024-08-02T08:50:08.268Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: WeiYe-Jing Products: datax-web Problem Types: CWE-78 Description: A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249086 is the identifier assigned to this vulnerability. Ad
xploit has been disclosed to the public and may be used. VDB-249086 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249086 - https://vuldb.com/?ctiid.249086 - https://medium.com/@2839549219ljk/rec-vulnerability-e8f2e1033b1f
CVE ID: CVE-2023-7123 State: PUBLISHED Published: 2023-12-27T23:31:04.138Z Last Updated: 2024-08-02T08:50:08.153Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Medicine Tracking System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=save_medicine. The manipulation of the argument id/name/description leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-2
. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249095. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249095 - https://vuldb.com/?ctiid.249095 - https://medium.com/@2839549219ljk/medicine-tracking-system-sql-injection-7b0dde3a82a4
CVE ID: CVE-2023-7124 State: PUBLISHED Published: 2023-12-28T02:31:04.389Z Last Updated: 2024-08-02T08:50:08.284Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: code-projects Products: E-Commerce Site Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input <video/src=x onerror=alert(document.cookie)> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249096. Ad
ly. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249096. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249096 - https://vuldb.com/?ctiid.249096 - https://github.com/h4md153v63n/CVEs/blob/main/E-commerce_Site/E-commerce_Site-Reflected_Cross_Site_Scripting.md
CVE ID: CVE-2023-7125 State: PUBLISHED Published: 2024-01-16T15:57:04.740Z Last Updated: 2025-06-17T20:15:29.217Z Vendors: Unknown Products: Community by PeepSo Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post (visible on their wall in their profile page), which could allow attackers to make logged in users perform such action via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cac12b64-ed25-4ee2-933f-8ff722605271/
CVE ID: CVE-2023-7126 State: PUBLISHED Published: 2023-12-28T14:00:05.757Z Last Updated: 2024-08-02T08:50:08.292Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Automated Voting System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249129 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: R
used. The identifier VDB-249129 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249129 - https://vuldb.com/?ctiid.249129 - https://github.com/h4md153v63n/CVEs/blob/main/Automated_Voting_System/Automated_Voting_System-SQL_Injection-1.md
CVE ID: CVE-2023-7127 State: PUBLISHED Published: 2023-12-28T14:31:03.760Z Last Updated: 2024-08-02T08:50:08.135Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Automated Voting System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuld
identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249130 - https://vuldb.com/?ctiid.249130 - https://github.com/h4md153v63n/CVEs/blob/main/Automated_Voting_System/Automated_Voting_System-SQL_Injection-2.md
CVE ID: CVE-2023-7128 State: PUBLISHED Published: 2023-12-28T15:00:06.338Z Last Updated: 2024-08-02T08:50:08.267Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Voting System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249131. Additional Analyst Notes: - CVE Program Conta
ay be used. The associated identifier of this vulnerability is VDB-249131. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249131 - https://vuldb.com/?ctiid.249131 - https://github.com/h4md153v63n/CVEs/blob/main/Voting_System/Voting_System-SQL_Injection-1.md
CVE ID: CVE-2023-7129 State: PUBLISHED Published: 2023-12-28T15:31:04.690Z Last Updated: 2024-08-02T08:50:08.198Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Voting System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249132. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249132
nerability is VDB-249132. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249132 - https://vuldb.com/?ctiid.249132 - https://github.com/h4md153v63n/CVEs/blob/main/Voting_System/Voting_System-SQL_Injection-2.md
CVE ID: CVE-2023-7130 State: PUBLISHED Published: 2023-12-31T08:48:28.662Z Last Updated: 2024-11-20T16:54:01.701Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: College Notes Gallery Problem Types: CWE-89 Description: A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249133 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: -
sed. The identifier VDB-249133 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249133 - https://vuldb.com/?ctiid.249133 - https://github.com/h4md153v63n/CVEs/blob/main/College_Notes_Gallery/College_Notes_Gallery-SQL_Injection.md