Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1714 State: PUBLISHED Published: 2023-11-01T09:02:47.607Z Last Updated: 2024-09-05T19:54:40.749Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bitrix24 Products: Bitrix24 Problem Types: CWE-502 Description: Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via (1) appending arbitrary content to existing PHP files or (2) PHAR deserialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-1714/
CVE ID: CVE-2023-1715 State: PUBLISHED Published: 2023-11-01T09:03:05.343Z Last Updated: 2024-09-05T19:53:48.805Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Bitrix24 Products: Bitrix24 Problem Types: CWE-79 Description: A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-1715/
CVE ID: CVE-2023-1716 State: PUBLISHED Published: 2023-11-01T09:03:24.512Z Last Updated: 2024-09-05T19:52:50.595Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Bitrix24 Products: Bitrix24 Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-1716/
CVE ID: CVE-2023-1717 State: PUBLISHED Published: 2023-11-01T09:03:46.376Z Last Updated: 2024-09-05T19:45:36.920Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Bitrix24 Products: Bitrix24 Problem Types: CWE-79, CWE-1321 Description: Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ting `__proto__[tag]` and `__proto__[text]`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-1717/
CVE ID: CVE-2023-1718 State: PUBLISHED Published: 2023-11-01T09:04:03.276Z Last Updated: 2024-09-05T19:44:21.617Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Bitrix24 Products: Bitrix24 Problem Types: CWE-835 Description: Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-1718/
CVE ID: CVE-2023-1719 State: PUBLISHED Published: 2023-11-01T09:04:19.695Z Last Updated: 2024-09-05T19:43:24.735Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Bitrix24 Products: Bitrix24 Problem Types: CWE-665 Description: Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
lege, via overwriting uninitialised variables. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-1719/
CVE ID: CVE-2023-1720 State: PUBLISHED Published: 2023-11-01T09:04:46.293Z Last Updated: 2024-09-05T19:41:48.166Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Bitrix24 Products: Bitrix24 Problem Types: CWE-434 Description: Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via uploading a crafted HTML file through /desktop_app/file.ajax.php?action=uploadfile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
hp?action=uploadfile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-1720/
CVE ID: CVE-2023-1721 State: PUBLISHED Published: 2023-06-23T23:02:38.582Z Last Updated: 2024-11-27T19:55:10.909Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Yoga Class Registration System Products: Yoga Class Registration System Problem Types: CWE-434 Description: Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/blessd/ - https://www.sourcecodeste
ontainer: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/blessd/ - https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html
CVE ID: CVE-2023-1722 State: PUBLISHED Published: 2023-06-24T01:20:25.989Z Last Updated: 2024-11-27T19:53:03.784Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Yoga Class Registration System Products: Yoga Class Registration System Problem Types: CWE-352 Description: Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/wyckoff/ - https://www.sourcecodest
ontainer: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/wyckoff/ - https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html
CVE ID: CVE-2023-1723 State: PUBLISHED Published: 2023-04-17T11:45:05.271Z Last Updated: 2025-02-05T20:46:00.276Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Veragroup Products: Mobile Assistant Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veragroup Mobile Assistant allows SQL Injection.This issue affects Mobile Assistant: before 21.S.2343. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0228
CVE ID: CVE-2023-1724 State: PUBLISHED Published: 2023-06-24T00:13:34.926Z Last Updated: 2024-11-27T19:53:59.275Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Ladybirdweb Products: Faveo Helpdesk Problem Types: CWE-79 Description: Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ladybirdweb/faveo-helpdesk/ - https://fluidattacks.com/advisories/towers/
CVE ID: CVE-2023-1725 State: PUBLISHED Published: 2023-03-30T14:30:45.858Z Last Updated: 2025-02-11T19:16:30.126Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Infoline Products: Project Management System Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forgery.This issue affects Project Management System: before 4.09.31.125. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0187
CVE ID: CVE-2023-1726 State: PUBLISHED Published: 2023-04-07T12:13:28.201Z Last Updated: 2025-02-10T15:23:09.769Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Proliz Products: OBS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proliz OBS allows Stored XSS for an authenticated user.This issue affects OBS: before 23.04.01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0205
CVE ID: CVE-2023-1728 State: PUBLISHED Published: 2023-04-04T08:40:51.443Z Last Updated: 2025-02-11T17:05:05.615Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Fernus Informatics Products: LMS Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection.This issue affects LMS: before 23.04.03. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0194
CVE ID: CVE-2023-1729 State: PUBLISHED Published: 2023-05-15T00:00:00 Last Updated: 2024-08-02T05:57:24.974Z Vendors: n/a Products: LibRaw Problem Types: CWE-119 Description: A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/issues/557 - https://bugzilla.redhat.com/show_bug.cgi?id=2188240 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.or
J3UBTJBZHNPJQFOSGM5L7WAHHE2GY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html - https://www.debian.org/security/2023/dsa-5412 - https://security.gentoo.org/glsa/202312-08
CVE ID: CVE-2023-1730 State: PUBLISHED Published: 2023-05-02T07:05:01.073Z Last Updated: 2025-01-30T14:23:35.538Z Vendors: Unknown Products: SupportCandy Problem Types: CWE-89 SQL Injection Description: The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/44b51a56-ff05-4d50-9327-fc9bab74d4b7
CVE ID: CVE-2023-1731 State: PUBLISHED Published: 2023-04-24T13:36:03.117Z Last Updated: 2025-02-04T19:16:58.162Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Meinberg Products: LTOS Problem Types: CWE-434 Description: In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm
CVE ID: CVE-2023-1732 State: PUBLISHED Published: 2023-05-10T11:41:53.902Z Last Updated: 2025-01-27T18:32:25.797Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: Cloudflare Products: CIRCL Problem Types: CWE-20, CWE-755 Description: When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error. In rare deployment cases (error thrown by the Read() function), this could lead to a predictable shared secret. The tkn20 and blindrsa components did not check whether enough randomness was returned from the user provided randomness source. Typically the user provides crypto/rand.Reade
r enough randomness was returned from the user provided randomness source. Typically the user provides crypto/rand.Reader, which in the vast majority of cases will always return the right number random bytes. In the cases where it does not, or the user provides a source that does not, the blinding for blindrsa is weak and integrity of the plaintext is not ensured in tkn20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/circl/security/advisories/GHSA-2q89-485c-9j2x
CVE ID: CVE-2023-1733 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T20:48:40.695Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to 15.10.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/392665 - https://hackerone.com/reports/1723124 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2
ab/-/issues/392665 - https://hackerone.com/reports/1723124 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1733.json
CVE ID: CVE-2023-1734 State: PUBLISHED Published: 2023-03-30T19:00:04.957Z Last Updated: 2024-08-02T05:57:25.139Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Young Entrepreneur E-Negosyo System Problem Types: CWE-434 Description: A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-224622 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Re
tely. VDB-224622 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224622 - https://vuldb.com/?ctiid.224622
CVE ID: CVE-2023-1735 State: PUBLISHED Published: 2023-03-30T19:31:02.774Z Last Updated: 2025-02-11T18:47:45.627Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Young Entrepreneur E-Negosyo System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-224623. Additional Analyst Notes: - CVE Program Container: - CISA AD
associated identifier of this vulnerability is VDB-224623. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224623 - https://vuldb.com/?ctiid.224623
CVE ID: CVE-2023-1736 State: PUBLISHED Published: 2023-03-30T19:31:03.721Z Last Updated: 2024-08-02T05:57:24.979Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Young Entrepreneur E-Negosyo System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this issue is some unknown functionality of the file cart/controller.php?action=add. The manipulation of the argument PROID leads to sql injection. The identifier of this vulnerability is VDB-224624. Additional Analyst Notes: - CVE Program Container: References: - https:
identifier of this vulnerability is VDB-224624. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224624 - https://vuldb.com/?ctiid.224624 - https://www.sourcecodester.com/php/12684/young-entrepreneur-e-negosyo-system.html
CVE ID: CVE-2023-1737 State: PUBLISHED Published: 2023-03-30T20:00:05.024Z Last Updated: 2025-02-11T19:08:28.393Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Young Entrepreneur E-Negosyo System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-224625 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
4625 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224625 - https://vuldb.com/?ctiid.224625
CVE ID: CVE-2023-1738 State: PUBLISHED Published: 2023-03-30T20:31:03.597Z Last Updated: 2025-02-12T14:55:46.682Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Young Entrepreneur E-Negosyo System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php?q=product. The manipulation of the argument search leads to sql injection. The attack can be initiated remotely. VDB-224626 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224626 - https://vuldb.com/?ctiid.224626
CVE ID: CVE-2023-1739 State: PUBLISHED Published: 2023-03-30T20:31:04.713Z Last Updated: 2024-08-02T05:57:25.194Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple and Beautiful Shopping Cart System Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0 and classified as critical. This issue affects some unknown processing of the file upload.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224627. Additional Analyst Notes: -
o the public and may be used. The associated identifier of this vulnerability is VDB-224627. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224627 - https://vuldb.com/?ctiid.224627 - https://gitee.com/misak7in/cve/blob/master/simple%20and%20beautiful%20shopping%20cart%20system/simple%20and%20beautiful%20shopping%20cart%20system%20upload.php%20has%20a%20file%20upload%20vulnerability.pdf
CVE ID: CVE-2023-1740 State: PUBLISHED Published: 2023-03-30T21:00:05.720Z Last Updated: 2024-08-02T05:57:25.193Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Air Cargo Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/user/manage_user.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-2
ck remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224628. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224628 - https://vuldb.com/?ctiid.224628 - https://github.com/west9b/bug_report/blob/main/SQLi-1.md
CVE ID: CVE-2023-1741 State: PUBLISHED Published: 2023-03-30T21:00:06.950Z Last Updated: 2024-08-02T05:57:25.054Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: jeecg-boot Problem Types: CWE-89 Description: A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file SysDictMapper.java of the component Sleep Command Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224629 was assigned to this vulnerability. Additional Analyst Notes: -
o the public and may be used. The identifier VDB-224629 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224629 - https://vuldb.com/?ctiid.224629 - https://github.com/private-null/report/blob/main/README.md
CVE ID: CVE-2023-1742 State: PUBLISHED Published: 2023-03-30T21:31:03.698Z Last Updated: 2024-08-02T05:57:25.000Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: IBOS Problem Types: CWE-89 Description: A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-224630 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb
dentifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224630 - https://vuldb.com/?ctiid.224630 - https://gitee.com/wkstestete/cve/blob/master/sql/ibos%20sql%20injection3.md
CVE ID: CVE-2023-1743 State: PUBLISHED Published: 2023-03-30T22:00:04.661Z Last Updated: 2024-08-02T05:57:25.176Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Grade Point Average GPA Calculator Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Grade Point Average GPA Calculator 1.0. This affects an unknown part of the file index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224631. Additional Analyst Note
ed to the public and may be used. The associated identifier of this vulnerability is VDB-224631. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224631 - https://vuldb.com/?ctiid.224631 - https://github.com/E1CHO/cve_hub/blob/main/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3%20vlun%202.pdf