Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33966 State: PUBLISHED Published: 2024-08-06T11:21:21.534Z Last Updated: 2024-08-08T15:49:30.098Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: Janobe PayPal, Janobe Credit Card, Janobe Debit Card Payment Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'xtsearch' in '/admin/mod_reports/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
ch' in '/admin/mod_reports/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33967 State: PUBLISHED Published: 2024-08-06T11:53:34.083Z Last Updated: 2024-08-07T18:40:09.828Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: School Attendance Monitoring System, chool Event Management System Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/attendance_print.php' parameter. Additional Analy
view' in 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/attendance_print.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33968 State: PUBLISHED Published: 2024-08-06T11:54:22.043Z Last Updated: 2024-08-06T13:41:18.731Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: School Attendance Monitoring System, chool Event Management System Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/index.php' parameter. Additional Analyst Notes: - CISA ADP
Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33969 State: PUBLISHED Published: 2024-08-06T11:55:02.847Z Last Updated: 2024-08-06T14:25:33.422Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: School Attendance Monitoring System, chool Event Management System Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/AttendanceMonitoring/department/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
id' in '/AttendanceMonitoring/department/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33970 State: PUBLISHED Published: 2024-08-06T11:55:29.937Z Last Updated: 2024-08-08T15:53:35.811Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: School Attendance Monitoring System, chool Event Management System Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'studid' in '/candidate/controller.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
studid' in '/candidate/controller.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33971 State: PUBLISHED Published: 2024-08-06T11:55:59.506Z Last Updated: 2024-08-07T18:06:55.076Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: School Attendance Monitoring System, chool Event Management System Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'username' in '/login.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe
username' in '/login.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33972 State: PUBLISHED Published: 2024-08-06T11:56:27.429Z Last Updated: 2024-08-06T13:39:34.735Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: School Attendance Monitoring System, chool Event Management System Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'events' in '/report/event_print.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
events' in '/report/event_print.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33973 State: PUBLISHED Published: 2024-08-06T11:56:55.835Z Last Updated: 2024-08-06T18:41:22.407Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: School Attendance Monitoring System, chool Event Management System Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in '/report/attendance_print.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichme
Attendance' and 'YearLevel' in '/report/attendance_print.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33974 State: PUBLISHED Published: 2024-08-06T11:57:17.030Z Last Updated: 2024-08-06T18:39:40.319Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: School Attendance Monitoring System, chool Event Management System Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Users in '/report/printlogs.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www
Users in '/report/printlogs.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33975 State: PUBLISHED Published: 2024-08-06T10:54:24.486Z Last Updated: 2024-08-06T18:31:24.556Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: E-Negosyo System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'view' parameter in '/admin/products/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerab
alyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33976 State: PUBLISHED Published: 2024-08-06T10:56:09.762Z Last Updated: 2024-08-06T13:16:18.699Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: E-Negosyo System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'id' parameter in '/admin/user/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilitie
Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33977 State: PUBLISHED Published: 2024-08-06T10:58:21.857Z Last Updated: 2024-08-06T15:30:42.583Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: E-Negosyo System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'view' parameter in /admin/orders/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33978 State: PUBLISHED Published: 2024-08-06T11:00:45.115Z Last Updated: 2024-08-06T13:51:27.429Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: E-Negosyo System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'category' parameter in '/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33979 State: PUBLISHED Published: 2024-08-06T11:04:43.408Z Last Updated: 2024-08-07T20:41:38.959Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: Janobe PayPal, Credit Card, Debit Card Payment Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure' and 'accomodation' parameters in '/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-c
ters in '/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33980 State: PUBLISHED Published: 2024-08-06T11:05:42.363Z Last Updated: 2024-08-08T14:38:43.038Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: Janobe PayPal, Credit Card, Debit Card Payment Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/mod_reports/printreport.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/avis
php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33981 State: PUBLISHED Published: 2024-08-06T11:06:40.992Z Last Updated: 2024-08-07T18:47:13.010Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: Janobe PayPal, Credit Card, Debit Card Payment Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/mod_reports/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/mult
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33982 State: PUBLISHED Published: 2024-08-06T13:00:56.316Z Last Updated: 2024-08-06T13:28:09.769Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Attendance Monitoring System, School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'StudentID' parameter in '/AttendanceMonitoring/student/controller.php'. Additional Analyst Notes: - CISA ADP Vulnrichment:
dentID' parameter in '/AttendanceMonitoring/student/controller.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33983 State: PUBLISHED Published: 2024-08-06T13:01:40.353Z Last Updated: 2024-08-06T13:12:07.201Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Attendance Monitoring System, School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLevel' parameters in '/AttendanceMonitoring/report/attendance_print.php'. Additional Ana
endance', 'attenddate' and 'YearLevel' parameters in '/AttendanceMonitoring/report/attendance_print.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33984 State: PUBLISHED Published: 2024-08-06T13:02:03.154Z Last Updated: 2024-08-06T13:17:50.865Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Attendance Monitoring System, School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLevel' parameters in '/AttendanceMonitoring/report/index.php'. Additional Analyst Notes:
endance', 'attenddate' and 'YearLevel' parameters in '/AttendanceMonitoring/report/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33985 State: PUBLISHED Published: 2024-08-06T13:02:22.294Z Last Updated: 2024-08-06T13:23:51.512Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Attendance Monitoring System, School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/course/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe
w' parameter in '/course/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33986 State: PUBLISHED Published: 2024-08-06T13:02:39.564Z Last Updated: 2024-08-06T13:39:53.185Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Attendance Monitoring System, School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/department/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.in
w' parameter in '/department/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33987 State: PUBLISHED Published: 2024-08-06T13:03:47.450Z Last Updated: 2024-08-06T14:41:02.875Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Attendance Monitoring System, School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate', 'YearLevel', 'eventdate', 'events', 'Users' and 'YearLevel' parameters in '/report/index.php'. A
endance', 'attenddate', 'YearLevel', 'eventdate', 'events', 'Users' and 'YearLevel' parameters in '/report/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33988 State: PUBLISHED Published: 2024-08-06T13:04:16.980Z Last Updated: 2024-08-08T15:47:25.790Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Attendance Monitoring System, School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLevel' parameters in '/report/attendance_print.php'. Additional Analyst Notes: - CISA AD
endance', 'attenddate' and 'YearLevel' parameters in '/report/attendance_print.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33989 State: PUBLISHED Published: 2024-08-06T13:06:08.419Z Last Updated: 2024-08-06T13:39:11.941Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'eventdate' and 'events' parameters in 'port/event_print.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/
eters in 'port/event_print.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33990 State: PUBLISHED Published: 2024-08-06T13:06:27.544Z Last Updated: 2024-08-06T14:34:55.136Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'id' and 'view' parameters in '/user/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert
'/user/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33991 State: PUBLISHED Published: 2024-08-06T13:07:03.052Z Last Updated: 2024-08-06T14:37:59.761Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/eventwinner/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33992 State: PUBLISHED Published: 2024-08-06T13:07:18.963Z Last Updated: 2024-08-08T15:47:03.101Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Janobe Products: School Event Management System Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vul
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products