Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1481 State: PUBLISHED Published: 2023-03-18T09:00:07.027Z Last Updated: 2025-02-26T17:14:00.220Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Monitoring of Students Cyber Accounts System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this issue is some unknown functionality of the file modules/balance/index.php?view=balancelist of the component POST Parameter Handler. The manipulation of the argument id with the input "><script>alert(111)</script> leads to cross site scripting. The attack may be launch
of the argument id with the input "><script>alert(111)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223364. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223364 - https://vuldb.com/?ctiid.223364 - https://github.com/xyaly163/bug_report/blob/main/XSS-1.md
CVE ID: CVE-2023-1482 State: PUBLISHED Published: 2023-03-18T09:31:03.575Z Last Updated: 2025-02-26T17:16:47.300Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: HkCms Problem Types: CWE-94 Description: A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Con
d may be used. The identifier VDB-223365 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223365 - https://vuldb.com/?ctiid.223365 - https://gitee.com/Hk_Cms/HkCms/issues/I6J7ZD
CVE ID: CVE-2023-1483 State: PUBLISHED Published: 2023-03-18T09:31:04.547Z Last Updated: 2024-08-02T05:49:11.639Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: XiaoBingBy Products: TeaCMS Problem Types: CWE-89 Description: A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223366 - https://vuldb.com/?ctiid.2233
ional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223366 - https://vuldb.com/?ctiid.223366 - https://gitee.com/xiaobingby/TeaCMS/issues/I6IJ0K
CVE ID: CVE-2023-1484 State: PUBLISHED Published: 2023-03-18T10:00:05.087Z Last Updated: 2024-08-02T05:49:11.649Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: xzjie Products: cms Problem Types: CWE-434 Description: A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-223367. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223367 - https://vuldb.com/?ctiid.223367 - https://gitee.com
CVE Program Container: References: - https://vuldb.com/?id.223367 - https://vuldb.com/?ctiid.223367 - https://gitee.com/xzjie/cms/issues/I6INIT
CVE ID: CVE-2023-1485 State: PUBLISHED Published: 2023-03-18T20:31:03.602Z Last Updated: 2024-08-02T05:49:11.657Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Young Entrepreneur E-Negosyo System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input <script>alert(222)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a
to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223371. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223371 - https://vuldb.com/?ctiid.223371 - https://github.com/2714925725/bug_report/blob/main/XSS-1.md
CVE ID: CVE-2023-1486 State: PUBLISHED Published: 2023-03-18T20:31:04.640Z Last Updated: 2024-08-02T05:49:11.646Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Lespeed Products: WiseCleaner Wise Force Deleter Problem Types: CWE-284 Description: A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnera
ed to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223372. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223372 - https://vuldb.com/?ctiid.223372 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1486 - https://drive.google.com/file/d/1Ziu1Ut_-01mDpjdj2Z8rfiU7gtUd_WVU/view
CVE ID: CVE-2023-1487 State: PUBLISHED Published: 2023-03-18T21:00:04.837Z Last Updated: 2024-11-22T20:58:40.165Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Lespeed Products: WiseCleaner Wise System Monitor Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C40208C/0x9C402000/0x9C402084/0x9C402088/0x9C402004/0x9C4060C4/0x9C4060CC/0x9C4060D0/0x9C4060D4/0x9C40A0DC/0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Atta
n the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223373 - https://vuldb.com/?ctiid.223373 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1487 - https://drive.google.com/file/d/1zk_ErtD34TBnQu8VGTUZKQpGGVDaUR1y/view
CVE ID: CVE-2023-1488 State: PUBLISHED Published: 2023-03-18T21:00:06.112Z Last Updated: 2024-08-02T05:49:11.698Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Lespeed Products: WiseCleaner Wise System Monitor Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-223374 i
sible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-223374 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223374 - https://vuldb.com/?ctiid.223374 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1488 - https://drive.google.com/file/d/1X4qH-BIww5jIdoYfg9WKvX5088cpMRHY/view
CVE ID: CVE-2023-1489 State: PUBLISHED Published: 2023-03-18T21:31:03.246Z Last Updated: 2024-08-02T05:49:11.683Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lespeed Products: WiseCleaner Wise System Monitor Problem Types: CWE-284 Description: A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identif
ack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223375. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223375 - https://vuldb.com/?ctiid.223375 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1489 - https://drive.google.com/file/d/15k4sO3qRWDORWjU2QyOVoT_DumX6LrWu/view
CVE ID: CVE-2023-1490 State: PUBLISHED Published: 2023-03-18T22:00:04.603Z Last Updated: 2024-08-02T05:49:11.659Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Max Secure Products: Anti Virus Plus Problem Types: CWE-284 Description: A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223376. Additional Analy
t has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223376. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223376 - https://vuldb.com/?ctiid.223376 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1490 - https://drive.google.com/file/d/1PmzG42vFkqpwfgTG0KACzyH8oA7OddWG/view
CVE ID: CVE-2023-1491 State: PUBLISHED Published: 2023-03-18T22:00:05.735Z Last Updated: 2024-08-02T05:49:11.698Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Max Secure Products: Anti Virus Plus Problem Types: CWE-284 Description: A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerabilit
he exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223377 - https://vuldb.com/?ctiid.223377 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1491 - https://drive.google.com/file/d/1-h-6ijBvucNU-dYglWW5n4l2ys-MDAF9/view
CVE ID: CVE-2023-1492 State: PUBLISHED Published: 2023-03-18T22:31:03.586Z Last Updated: 2024-08-02T05:49:11.670Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Max Secure Products: Anti Virus Plus Problem Types: CWE-404 Description: A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects the function 0x220019 in the library MaxProc64.sys of the component IoControlCode Handler. The manipulation of the argument SystemBuffer leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223378 is the identifier assigned
y is a requirement. The exploit has been disclosed to the public and may be used. VDB-223378 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223378 - https://vuldb.com/?ctiid.223378 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1492 - https://drive.google.com/file/d/1G_Szy4kCrZU-whGbVcxpdE1yKf5Vxqq3/view
CVE ID: CVE-2023-1493 State: PUBLISHED Published: 2023-03-18T23:00:05.752Z Last Updated: 2024-08-02T05:49:11.679Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Max Secure Products: Anti Virus Plus Problem Types: CWE-404 Description: A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been rated as problematic. This issue affects the function 0x220019 in the library MaxProctetor64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB
st. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223379. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223379 - https://vuldb.com/?ctiid.223379 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1493 - https://drive.google.com/file/d/109wWkX5FbYrKKqQBXBC1_uLyi02Y7sqF/view
CVE ID: CVE-2023-1494 State: PUBLISHED Published: 2023-03-18T23:00:06.802Z Last Updated: 2025-02-11T21:35:59.680Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: IBOS Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223380. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
23380. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223380 - https://vuldb.com/?ctiid.223380 - https://gitee.com/cui-yiwei/cve-number/blob/master/images/IBOS%20oa%20v4.5.5.md/1.md
CVE ID: CVE-2023-1495 State: PUBLISHED Published: 2023-03-18T23:31:04.026Z Last Updated: 2025-02-26T17:17:50.826Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Rebuild Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is c9474f84e5f376dd2ade2078e3039961a9425da7. It is recommended to apply a patch to fix this issue. The i
er of the patch is c9474f84e5f376dd2ade2078e3039961a9425da7. It is recommended to apply a patch to fix this issue. The identifier VDB-223381 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223381 - https://vuldb.com/?ctiid.223381 - https://github.com/getrebuild/rebuild/issues/594 - https://github.com/getrebuild/rebuild/commit/c9474f84e5f376dd2ade2078e3039961a9425da7
CVE ID: CVE-2023-1496 State: PUBLISHED Published: 2023-03-19T00:00:00.000Z Last Updated: 2025-02-26T19:32:21.656Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: imgproxy Products: imgproxy/imgproxy Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2 - https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b689
CVE ID: CVE-2023-1497 State: PUBLISHED Published: 2023-03-19T19:00:05.255Z Last Updated: 2024-08-02T05:49:11.647Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple and Nice Shopping Cart Script Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223397 was assigned to this vulnerability. Addition
has been disclosed to the public and may be used. The identifier VDB-223397 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223397 - https://vuldb.com/?ctiid.223397 - https://github.com/Decemberus/BugHub/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20uploaderm.php%20has%20a%20file%20upload%20vulnerability.pdf
CVE ID: CVE-2023-1498 State: PUBLISHED Published: 2023-03-19T19:31:03.443Z Last Updated: 2024-11-22T17:53:28.596Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Responsive Hotel Site Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223398 is the identifier assigned to this vulnerability. Additional Analy
n disclosed to the public and may be used. VDB-223398 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223398 - https://vuldb.com/?ctiid.223398 - https://github.com/Decemberus/BugHub/blob/main/Responsive%20Hotel%20Site%20System%20Has%20Sql%20injection%20vulnerabilities.pdf
CVE ID: CVE-2023-1499 State: PUBLISHED Published: 2023-03-19T19:31:04.418Z Last Updated: 2024-08-02T05:49:11.674Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Simple Art Gallery Problem Types: CWE-89 Description: A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223399. Additional Analyst Notes: - CVE Program C
nd may be used. The associated identifier of this vulnerability is VDB-223399. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223399 - https://vuldb.com/?ctiid.223399 - https://github.com/Fchen-xcu/Vulnerability-Set/blob/main/SIMPLE%20ART%20GALLERY%20system%20reach_city%20has%20Sql%20injection%20vulnerabilities.pdf
CVE ID: CVE-2023-1500 State: PUBLISHED Published: 2023-03-19T20:00:04.451Z Last Updated: 2025-02-26T19:16:06.419Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Simple Art Gallery Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument about_info leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223400. Additional Analyst Notes: - CVE P
sed to the public and may be used. The identifier of this vulnerability is VDB-223400. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223400 - https://vuldb.com/?ctiid.223400 - https://github.com/Decemberus/BugHub/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20%20Cross%20site%20scripting%20vulnerabilities.pdf
CVE ID: CVE-2023-1501 State: PUBLISHED Published: 2023-03-19T20:00:05.695Z Last Updated: 2024-08-02T05:49:11.673Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: RockOA Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223401 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vu
B-223401 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223401 - https://vuldb.com/?ctiid.223401 - https://gitee.com/xieqiangweb/cve/blob/master/cve/Rockoa.md
CVE ID: CVE-2023-1502 State: PUBLISHED Published: 2023-03-20T08:00:04.628Z Last Updated: 2024-08-02T05:49:11.674Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Alphaware Simple E-Commerce System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file function/edit_customer.php. The manipulation of the argument firstname/mi/lastname with the input a' RLIKE SLEEP(5) AND 'dAbu'='dAbu leads to sql injection. The attack may be launched remotely. The complexity of an attack is rath
EEP(5) AND 'dAbu'='dAbu leads to sql injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-223406 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223406 - https://vuldb.com/?ctiid.223406
CVE ID: CVE-2023-1503 State: PUBLISHED Published: 2023-03-20T08:00:05.740Z Last Updated: 2024-08-02T05:49:11.660Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Alphaware Simple E-Commerce System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file admin/admin_index.php. The manipulation of the argument username/password with the input admin' AND (SELECT 8062 FROM (SELECT(SLEEP(5)))meUD)-- hLiX leads to sql injection. It is possible to initiate the attack remotely. The complexity of an attack is rath
meUD)-- hLiX leads to sql injection. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223407. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223407 - https://vuldb.com/?ctiid.223407