Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-12982 State: PUBLISHED Published: 2024-12-27T06:00:16.257Z Last Updated: 2024-12-27T16:10:42.617Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Blood Bank & Donor Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /bbdms/admin/update-contactinfo.php. The manipulation of the argument Address leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA A
y be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289358 - https://vuldb.com/?ctiid.289358 - https://vuldb.com/?submit.469202 - https://phpgurukul.com/
CVE ID: CVE-2024-12983 State: PUBLISHED Published: 2024-12-27T06:31:05.053Z Last Updated: 2024-12-27T16:09:38.481Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: code-projects Products: Hospital Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameter
possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289359 - https://vuldb.com/?ctiid.289359 - https://vuldb.com/?submit.469215 - https://github.com/Rocky-Bull/myCVE/blob/main/Hospital_Management_System_XSS.md - https://code-projects.org/
CVE ID: CVE-2024-12984 State: PUBLISHED Published: 2024-12-27T14:31:05.483Z Last Updated: 2024-12-27T14:53:46.976Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Amcrest Products: IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B, IPC-IPM-721S Problem Types: CWE-200, CWE-284 Description: A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211. This affects an unknown part of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. It is possible t
eb_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289377 - https://vuldb.com/?ctiid.289377 - https://vuldb.com/?submit.461109 - https://netsecfish.notion.site/AMCREST-IP-Camera-Information-Disclosure-1596b683e67c8045ad10c16b3eed456f?pvs=4
CVE ID: CVE-2024-12985 State: PUBLISHED Published: 2024-12-27T15:00:11.920Z Last Updated: 2024-12-27T16:05:42.710Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Overtek Products: OT-E801G Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical was found in Overtek OT-E801G OTE801G65.1.1.0. This vulnerability affects unknown code of the file /diag_ping.cmd?action=test&interface=ppp0.1&ipaddr=8.8.8.8%26%26cat%20/etc/passwd&ipversion=4&sessionKey=test. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289378 - https://vuldb.com/?ctiid.289378 - https://vuldb.com/?submit.462387
CVE ID: CVE-2024-12986 State: PUBLISHED Published: 2024-12-27T15:31:05.003Z Last Updated: 2025-05-16T18:37:19.459Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: DrayTek Products: Vigor2960, Vigor300B Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The manipulation of the argument session leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to ve
ion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289379 - https://vuldb.com/?ctiid.289379 - https://vuldb.com/?submit.468794 - https://netsecfish.notion.site/Command-Injection-in-apmcfgupptim-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c80b9ad8cc37b93273bf6?pvs=4
CVE ID: CVE-2024-12987 State: PUBLISHED Published: 2024-12-27T16:00:13.600Z Last Updated: 2025-10-21T22:55:33.312Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: DrayTek Products: Vigor2960, Vigor300B Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is
aunch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.289380 - https://vuldb.com/?ctiid.289380 - https://vuldb.com/?submit.468795 - https://netsecfish.notion.site/Command-Injection-in-apmcfgupload-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c8040b7f1f0ffe29ce18f?pvs=4
CVE ID: CVE-2024-12988 State: PUBLISHED Published: 2024-12-27T17:00:14.876Z Last Updated: 2025-01-14T13:59:51.349Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Netgear Products: R6900P, R7000P Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. A
o the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289381 - https://vuldb.com/?ctiid.289381 - https://vuldb.com/?submit.462781 - https://github.com/physicszq/Routers/tree/main/Netgear/1.3.3.154 - https://www.netgear.com/about/eos/ - https://www.netgear.com/
CVE ID: CVE-2024-12989 State: PUBLISHED Published: 2024-12-27T17:31:04.333Z Last Updated: 2024-12-27T18:20:46.268Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WISI Products: Tangram GT31 Problem Types: CWE-918 Description: A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289382 - https://vuldb.com/?ctiid.289382 - https://vuldb.com/?submit.463798
CVE ID: CVE-2024-12990 State: PUBLISHED Published: 2024-12-27T18:00:13.706Z Last Updated: 2024-12-27T18:20:05.892Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ruifang-tech Products: Rebuild Problem Types: CWE-601 Description: A vulnerability was found in ruifang-tech Rebuild 3.8.6. It has been classified as problematic. This affects an unknown part of the file /user/admin-verify of the component Admin Verification Page. The manipulation of the argument nexturl with the input http://localhost/evil.html leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contac
ble to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289383 - https://vuldb.com/?ctiid.289383 - https://vuldb.com/?submit.464029 - https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/OpenRedirect-AdminVerification.md
CVE ID: CVE-2024-12991 State: PUBLISHED Published: 2024-12-27T19:31:04.900Z Last Updated: 2024-12-28T01:24:11.473Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Beijing Longda Jushang Technology Products: DBShop商城系统 Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. It has been declared as problematic. This vulnerability affects unknown code of the file /home-order. The manipulation of the argument orderStatus with the input %22%3E%3Csvg%20onload=alert(5888)%3E leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The
site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289384 - https://vuldb.com/?ctiid.289384 - https://vuldb.com/?submit.464213 - https://github.com/Hebing123/cve/issues/31
CVE ID: CVE-2024-12992 State: PUBLISHED Published: 2025-03-17T09:21:39.002Z Last Updated: 2025-03-17T12:32:02.578Z Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-77 Description: Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection via RCE. This issue affects Pandora FMS from 700 to 777.6 . Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2024-12993 State: PUBLISHED Published: 2024-12-30T11:01:17.600Z Last Updated: 2024-12-30T14:14:56.228Z Vendors: Infinix Mobile Products: com.rlk.weathers Problem Types: CWE-497 Description: Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We suppose this issue affects all Infinix Mobile devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/12/CVE-2024-12993/ - https://cert.pl/posts/2024/12/CVE
ISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/12/CVE-2024-12993/ - https://cert.pl/posts/2024/12/CVE-2024-12993/
CVE ID: CVE-2024-12994 State: PUBLISHED Published: 2024-12-28T13:00:12.885Z Last Updated: 2024-12-28T16:04:45.373Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: running-elephant Products: Datart Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical. Affected by this issue is the function extractModel of the file /import of the component File Upload. The manipulation of the argument file leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. A
ed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289628 - https://vuldb.com/?ctiid.289628 - https://vuldb.com/?submit.464484 - https://github.com/piqi233/cves/blob/main/readme.md
CVE ID: CVE-2024-12995 State: PUBLISHED Published: 2024-12-28T13:31:04.856Z Last Updated: 2024-12-28T15:34:23.272Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: ruifang-tech Products: Rebuild Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/050-9000000000000001/tasks of the component Project Tasks Section. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289629 - https://vuldb.com/?ctiid.289629 - https://vuldb.com/?submit.465208 - https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskDescription.md
CVE ID: CVE-2024-12996 State: REJECTED Published: N/A Last Updated: 2025-01-06T14:38:44.354Z Description: No description available.
CVE ID: CVE-2024-12997 State: REJECTED Published: N/A Last Updated: 2025-01-06T14:38:37.105Z Description: No description available.
CVE ID: CVE-2024-12998 State: PUBLISHED Published: 2024-12-28T21:31:05.184Z Last Updated: 2024-12-30T16:10:56.807Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: code-projects Products: Online Car Rental System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289659 - https://vuldb.com/?ctiid.289659 - https://vuldb.com/?submit.469216 - https://code-projects.org/
CVE ID: CVE-2024-12999 State: PUBLISHED Published: 2024-12-29T02:00:14.583Z Last Updated: 2024-12-31T15:37:00.631Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Small CRM Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289660 - https://vuldb.com/?ctiid.289660 -
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289660 - https://vuldb.com/?ctiid.289660 - https://vuldb.com/?submit.469311 - https://phpgurukul.com/
CVE ID: CVE-2024-13000 State: PUBLISHED Published: 2024-12-29T02:31:05.299Z Last Updated: 2024-12-31T15:36:24.830Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Small CRM Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/quote-details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289661 - https://vuldb.com/?ctiid.289661
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289661 - https://vuldb.com/?ctiid.289661 - https://vuldb.com/?submit.469312 - https://phpgurukul.com/
CVE ID: CVE-2024-13001 State: PUBLISHED Published: 2024-12-29T03:00:13.428Z Last Updated: 2024-12-31T17:12:50.232Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Small CRM Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289662 - https://vuldb.com/?ctiid.28966
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289662 - https://vuldb.com/?ctiid.289662 - https://vuldb.com/?submit.469317 - https://phpgurukul.com/
CVE ID: CVE-2024-13002 State: PUBLISHED Published: 2024-12-29T03:31:04.856Z Last Updated: 2024-12-31T17:11:23.284Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Bookstore Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /order_process.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289663 - https://vuldb.com/?ctiid.289663 - https://vuldb.com/?submit.469394 - https://github.com/writeke/CVE/blob/main/BookstoreManagementSystemSQL.md - https://1000projects.org/
CVE ID: CVE-2024-13003 State: PUBLISHED Published: 2024-12-29T04:00:13.408Z Last Updated: 2024-12-31T17:10:30.299Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 1000 Projects Products: Portfolio Management System MCA Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /update_ed.php. The manipulation of the argument e_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289664 - https://vuldb.com/?ctiid.289664 - https://vuldb.com/?submit.469452 - https://github.com/naotuo/CVE/blob/main/SQL_Injection_in_Portfolio_Management_System.md - https://1000projects.org/
CVE ID: CVE-2024-13004 State: PUBLISHED Published: 2024-12-29T06:31:05.405Z Last Updated: 2024-12-31T15:35:56.910Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289665 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289665 - https://vuldb.com/?ctiid.289665 - https://vuldb.com/?submit.469685 - https://github.com/alc9700jmo/CVE/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2024-13005 State: PUBLISHED Published: 2024-12-29T07:31:04.812Z Last Updated: 2024-12-31T15:34:52.781Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 1000 Projects Products: Attendance Tracking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendance_action.php. The manipulation of the argument attendance_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289666 - https://vuldb.com/?ctiid.289666 - https://vuldb.com/?submit.469688 - https://github.com/Hacker0xOne/CVE/issues/18 - https://1000projects.org/
CVE ID: CVE-2024-13006 State: PUBLISHED Published: 2024-12-29T08:00:16.281Z Last Updated: 2024-12-30T14:53:14.945Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Human Resource Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown processing of the file /employeeview.php. The manipulation of the argument search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289667 - https://vuldb.com/?ctiid.289667 - https://vuldb.com/?submit.470260 - https://github.com/Sakurapan/CVE/issues/1 - https://1000projects.org/
CVE ID: CVE-2024-13007 State: PUBLISHED Published: 2024-12-29T08:31:05.156Z Last Updated: 2024-12-30T14:52:25.727Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Event Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289668 - https://vul
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289668 - https://vuldb.com/?ctiid.289668 - https://vuldb.com/?submit.470304 - https://github.com/T3rm1n4L-LYC/Vuldb/blob/main/SQL_Injection_in_Event_Management_System.md