Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10735 State: PUBLISHED Published: 2024-11-03T14:00:06.518Z Last Updated: 2024-11-04T20:33:59.054Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Project Worlds Products: Life Insurance Management System Problem Types: CWE-89 Description: A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282904 - https://vuldb.com/?ctiid.282904 - https://vuldb.com/?submit.435424 - https://github.com/GKb0y/Cve-report/blob/main/SQLi-life-insurance-management-system.md
CVE ID: CVE-2024-10736 State: PUBLISHED Published: 2024-11-03T14:31:04.727Z Last Updated: 2024-11-04T20:20:17.861Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Free Exam Hall Seating Management System Problem Types: CWE-89 Description: A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282905 - https://vuldb.com/?ctiid.282905 - https://vuldb.com/?submit.435425 - https://github.com/EddieAy/cve/issues/3
CVE ID: CVE-2024-10737 State: PUBLISHED Published: 2024-11-03T15:00:07.754Z Last Updated: 2024-11-05T14:44:39.779Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Free Exam Hall Seating Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282906 - https://vuldb.com/?ctiid.282906 - https://vuldb.com/?submit.435487 - https://github.com/Scholar-XD/CVE/issues/1
CVE ID: CVE-2024-10738 State: PUBLISHED Published: 2024-11-03T17:00:07.474Z Last Updated: 2024-11-04T18:13:18.609Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Farm Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in itsourcecode Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file manage-breed.php. The manipulation of the argument breed leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282907 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282907 - https://vuldb.com/?ctiid.282907 - https://vuldb.com/?submit.435539 - https://github.com/Nightmaremassacre/cve/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2024-10739 State: PUBLISHED Published: 2024-11-03T17:31:04.779Z Last Updated: 2024-11-05T14:42:48.353Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: E-Health Care System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/admin_pswd as part of String leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parame
. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "email" to be affected. But it must be assumed that parameter "admin_pswd" is affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282908 - https://vuldb.com/?ctiid.282908 - https://vuldb.com/?submit.436014 - https://github.com/UnrealdDei/cve/blob/main/sql11.md - https://code-projects.org/
CVE ID: CVE-2024-10740 State: PUBLISHED Published: 2024-11-03T19:31:05.081Z Last Updated: 2024-11-05T14:41:57.439Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: E-Health Care System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part of the file /Admin/consulting_detail.php. The manipulation of the argument consulting_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282909 - https://vuldb.com/?ctiid.282909 - https://vuldb.com/?submit.436311 - https://github.com/1270512529/cve/blob/main/sql.md - https://code-projects.org/
CVE ID: CVE-2024-10741 State: PUBLISHED Published: 2024-11-03T20:31:04.918Z Last Updated: 2024-11-04T21:25:22.179Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: E-Health Care System Problem Types: CWE-89 Description: A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument f_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282910 - https://vuldb.com/?ctiid.282910 - https://vuldb.com/?submit.436319 - https://github.com/maxihongtatum/cve/blob/main/sql14.md - https://code-projects.org/
CVE ID: CVE-2024-10742 State: PUBLISHED Published: 2024-11-03T21:00:08.003Z Last Updated: 2024-11-04T17:17:36.430Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Wazifa System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Wazifa System 1.0 and classified as critical. This issue affects some unknown processing of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282911 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282911 - https://vuldb.com/?ctiid.282911 - https://vuldb.com/?submit.436030 - https://github.com/xiaokka/cve/blob/main/sql.md - https://code-projects.org/
CVE ID: CVE-2024-10743 State: PUBLISHED Published: 2024-11-03T21:31:05.719Z Last Updated: 2024-11-04T17:11:32.546Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been classified as problematic. Affected is an unknown function of the file /shopping/admin/assets/plugins/DataTables/examples/examples_support/editable_ajax.php. The manipulation of the argument value leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
aunch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282912 - https://vuldb.com/?ctiid.282912 - https://vuldb.com/?submit.436060 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(editable_ajax.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10744 State: PUBLISHED Published: 2024-11-03T22:31:05.571Z Last Updated: 2024-11-04T17:11:01.635Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/complex_header_2.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analy
ing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282913 - https://vuldb.com/?ctiid.282913 - https://vuldb.com/?submit.436088 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(complex_header_2.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10745 State: PUBLISHED Published: 2024-11-03T23:00:07.433Z Last Updated: 2024-11-04T17:10:32.504Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/deferred_table.php. The manipulation of the argument scripts leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
tack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282914 - https://vuldb.com/?ctiid.282914 - https://vuldb.com/?submit.436093 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(deferred_table.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10746 State: PUBLISHED Published: 2024-11-03T23:31:05.543Z Last Updated: 2024-11-04T16:54:48.962Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. This affects an unknown part of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data.php. The manipulation of the argument scripts leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282915 - https://vuldb.com/?ctiid.282915 - https://vuldb.com/?submit.436113 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(dom_data.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10747 State: PUBLISHED Published: 2024-11-04T00:00:10.446Z Last Updated: 2024-11-05T15:01:16.064Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data_th.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282916 - https://vuldb.com/?ctiid.282916 - https://vuldb.com/?submit.436115 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(dom_data_th.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10748 State: PUBLISHED Published: 2024-11-04T00:31:04.563Z Last Updated: 2024-11-04T18:12:10.575Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Cosmote Greece Products: What's Up App Problem Types: CWE-1394 Description: A vulnerability, which was classified as problematic, has been found in Cosmote Greece What's Up App 4.47.3 on Android. This issue affects some unknown processing of the file gr/desquared/kmmsharedmodule/db/RealmDB.java of the component Realm Database Handler. The manipulation of the argument defaultRealmKey leads to use of default cryptographic key. Local access is required to approach this attack. The complexity of an attack
leads to use of default cryptographic key. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282917 - https://vuldb.com/?ctiid.282917 - https://vuldb.com/?submit.432429 - https://github.com/secuserx/CVE/blob/main/%5BHardcoded%20Realm%20Database%20Encryption%20Key%5D%20found%20in%20What's%20UP%20Android%20App%204.47.3%20-%20(RealmDB.java).md
CVE ID: CVE-2024-10749 State: PUBLISHED Published: 2024-11-04T00:31:06.125Z Last Updated: 2024-11-04T18:07:12.797Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: ThinkAdmin Problem Types: CWE-502 Description: A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argument uptoken leads to deserialization. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor
h. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282918 - https://vuldb.com/?ctiid.282918 - https://vuldb.com/?submit.432436 - https://github.com/pwysec/Xmwcq/blob/main/1.md
CVE ID: CVE-2024-10750 State: PUBLISHED Published: 2024-11-04T01:00:07.611Z Last Updated: 2024-11-05T14:55:33.301Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Tenda Products: i22 Problem Types: CWE-476 Description: A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV?fgHPOST/goform/SysToo. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282919 - https://vuldb.com/?ctiid.282919 - https://vuldb.com/?submit.435407 - https://github.com/xiaobor123/tenda-vul-i22 - https://www.tenda.com.cn/
CVE ID: CVE-2024-10751 State: PUBLISHED Published: 2024-11-04T01:00:09.112Z Last Updated: 2024-11-04T18:04:08.855Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: ISP Management System Problem Types: CWE-89 Description: A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282920 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282920 - https://vuldb.com/?ctiid.282920 - https://vuldb.com/?submit.436296 - https://github.com/JiangJiangCC/CVE/issues/1
CVE ID: CVE-2024-10752 State: PUBLISHED Published: 2024-11-04T01:31:04.566Z Last Updated: 2024-11-04T18:02:07.239Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Pet Shop Management System Problem Types: CWE-89, CWE-74, CWE-707 Description: A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /productsadd.php. The manipulation of the argument id/name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting file names to be affected. Addi
ed to the public and may be used. The initial researcher advisory mentions contradicting file names to be affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282921 - https://vuldb.com/?ctiid.282921 - https://vuldb.com/?submit.436316 - https://github.com/primaryboy/CVE/issues/1
CVE ID: CVE-2024-10753 State: PUBLISHED Published: 2024-11-04T02:00:08.516Z Last Updated: 2024-11-04T17:06:18.227Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. This vulnerability affects unknown code of the file admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data_two_headers.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282922 - https://vuldb.com/?ctiid.282922 - https://vuldb.com/?submit.436375 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(dom_data_two_headers.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10754 State: PUBLISHED Published: 2024-11-04T02:31:05.519Z Last Updated: 2024-11-04T17:05:37.711Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/dymanic_table.php. The manipulation of the argument scripts leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282923 - https://vuldb.com/?ctiid.282923 - https://vuldb.com/?submit.436376 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(dymanic_table.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10755 State: PUBLISHED Published: 2024-11-04T02:31:08.131Z Last Updated: 2024-11-04T17:04:57.379Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. Affected is an unknown function of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/empty_table.php. The manipulation of the argument scripts leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
ck remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282924 - https://vuldb.com/?ctiid.282924 - https://vuldb.com/?submit.436377 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(empty_table.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10756 State: PUBLISHED Published: 2024-11-04T03:00:09.262Z Last Updated: 2024-11-04T17:04:09.257Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/html_table.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
an be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282925 - https://vuldb.com/?ctiid.282925 - https://vuldb.com/?submit.436381 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(html_table.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10757 State: PUBLISHED Published: 2024-11-04T03:00:12.075Z Last Updated: 2024-11-04T17:03:15.701Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Shopping Portal 2.0. Affected by this issue is some unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/js_data.php. The manipulation of the argument scripts leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: