Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9069 State: PUBLISHED Published: 2024-09-25T02:05:07.403Z Last Updated: 2024-09-25T13:40:21.912Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: besnikac Products: Graphicsly – The ultimate graphics plugin for WordPress website builder ( Gutenberg, Elementor, Beaver Builder, WPBakery ) Problem Types: CWE-79 Description: The Graphicsly – The ultimate graphics plugin for WordPress website builder ( Gutenberg, Elementor, Beaver Builder, WPBakery ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This make
ploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/343a6dbd-baf5-4de8-ae3e-6954fd3f1556?source=cve - https://wordpress.org/plugins/graphicsly/#developers
CVE ID: CVE-2024-9070 State: PUBLISHED Published: 2025-03-20T10:10:14.562Z Last Updated: 2025-10-15T12:50:45.295Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: bentoml Products: bentoml/bentoml Problem Types: CWE-502 Description: A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
ading to automatic deserialization and arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7be6fc22-be18-44ee-a001-ac7158d5e1a5
CVE ID: CVE-2024-9071 State: PUBLISHED Published: 2024-10-04T09:30:41.473Z Last Updated: 2024-10-04T13:41:36.526Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: sigmadevs Products: Easy Demo Importer – A Modern One-Click Demo Import Solution Problem Types: CWE-79 Description: The Easy Demo Importer – A Modern One-Click Demo Import Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages tha
t possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/27a1f457-6bd9-41eb-83e1-cb9e62950041?source=cve - https://wordpress.org/plugins/easy-demo-importer/#developers - https://plugins.trac.wordpress.org/changeset/3162305/
CVE ID: CVE-2024-9072 State: PUBLISHED Published: 2024-10-10T02:06:02.838Z Last Updated: 2024-10-10T13:43:30.529Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gdprextensionscom Products: GDPR-Extensions-com – Consent Manager Problem Types: CWE-79 Description: The GDPR-Extensions-com – Consent Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesse
, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0ce2a9fe-3364-46b5-a6ae-b4feb3e20647?source=cve - https://wordpress.org/plugins/gdpr-consent-manager/#developers
CVE ID: CVE-2024-9073 State: PUBLISHED Published: 2024-09-25T02:05:26.805Z Last Updated: 2024-09-25T13:41:00.952Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpopal Products: GutenGeek Free Gutenberg Blocks for WordPress Problem Types: CWE-79 Description: The GutenGeek Free Gutenberg Blocks for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user ac
ckers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f1c68f9d-a026-4cef-82e6-25949a3d59ad?source=cve - https://wordpress.org/plugins/gtg-advanced-blocks/#developers
CVE ID: CVE-2024-9074 State: PUBLISHED Published: 2024-10-10T02:06:13.687Z Last Updated: 2024-10-10T13:11:43.336Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: essamamdani Products: Advanced Blocks Pro Problem Types: CWE-79 Description: The Advanced Blocks Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes:
nject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f419d14a-90d1-445a-b629-c2e978c3ab81?source=cve - https://wordpress.org/plugins/advanced-blocks-pro/#developers
CVE ID: CVE-2024-9075 State: PUBLISHED Published: 2024-09-21T23:00:06.683Z Last Updated: 2024-09-23T15:46:01.534Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Stirling-Tools Products: Stirling-PDF Problem Types: CWE-79 Description: A vulnerability was found in Stirling-Tools Stirling-PDF up to 0.28.3. It has been declared as problematic. This vulnerability affects unknown code of the component Markdown-to-PDF. The manipulation leads to cross site scripting. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.29.0 is able to address this issue. It is recommended to
e exploitation appears to be difficult. Upgrading to version 0.29.0 is able to address this issue. It is recommended to upgrade the affected component. The vendor explains that "this functionality was removed in 0.29.0 already" and "we plan to re-add at later date with issue resolved". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278242 - https://vuldb.com/?ctiid.278242 - https://vuldb.com/?submit.406335 - https://drive.google.com/file/d/1J4TnzgzKOEvMck3kpaFuR6zfSVt7YgKu/view?usp=sharing
CVE ID: CVE-2024-9076 State: PUBLISHED Published: 2024-09-22T00:00:10.642Z Last Updated: 2024-11-28T06:08:58.720Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: DedeCMS Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown processing of the file /dede/article_string_mix.php. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278243 - https://vuldb.com/?ctiid.278243 - https://vuldb.com/?submit.407461 - https://gitee.com/hjjjx/dede_cms/blob/master/article_string_mix_rce.md
CVE ID: CVE-2024-9077 State: PUBLISHED Published: 2024-09-22T01:00:05.878Z Last Updated: 2024-09-23T14:53:30.886Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: dingfangzu Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in dingfangzu up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. Affected is an unknown function of the file scripts/order.js of the component Order Checkout. The manipulation of the argument address-name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious deliver
has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278244 - https://vuldb.com/?ctiid.278244 - https://vuldb.com/?submit.407527 - https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/dingfanzu-CMS/dingfanzu-CMS%20order_confirm.html%20Ship-Address%20Stored%20Cross-Site%20Scripting(XSS).md
CVE ID: CVE-2024-9078 State: PUBLISHED Published: 2024-09-22T04:00:06.381Z Last Updated: 2024-09-23T14:49:19.042Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Student Record System Problem Types: CWE-89 Description: A vulnerability has been found in code-projects Student Record System 1.0 and classified as critical. This vulnerability affects unknown code of the file /course.php. The manipulation of the argument coursename leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278248 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278248 - https://vuldb.com/?ctiid.278248 - https://vuldb.com/?submit.411542 - https://github.com/ppp-src/a/issues/15 - https://code-projects.org/
CVE ID: CVE-2024-9079 State: PUBLISHED Published: 2024-09-22T04:31:04.271Z Last Updated: 2024-09-23T14:43:14.353Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Student Record System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Student Record System 1.0 and classified as critical. This issue affects some unknown processing of the file /marks.php. The manipulation of the argument coursename leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278249 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278249 - https://vuldb.com/?ctiid.278249 - https://vuldb.com/?submit.411846 - https://github.com/ppp-src/a/issues/16 - https://code-projects.org/
CVE ID: CVE-2024-9080 State: PUBLISHED Published: 2024-09-22T06:31:04.920Z Last Updated: 2024-09-23T15:37:06.282Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Student Record System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278250
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278250 - https://vuldb.com/?ctiid.278250 - https://vuldb.com/?submit.411847 - https://github.com/ppp-src/a/issues/17 - https://code-projects.org/
CVE ID: CVE-2024-9081 State: PUBLISHED Published: 2024-09-22T07:00:07.760Z Last Updated: 2024-09-23T16:11:57.421Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Eyewear Shop Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278251
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278251 - https://vuldb.com/?ctiid.278251 - https://vuldb.com/?submit.411564 - https://github.com/41lai/cve/blob/main/sql.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9082 State: PUBLISHED Published: 2024-09-22T08:00:07.660Z Last Updated: 2025-03-31T05:47:57.208Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Eyewear Shop Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save of the component User Creation Handler. The manipulation of the argument Type with the input 1 leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analys
on. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278252 - https://vuldb.com/?ctiid.278252 - https://vuldb.com/?submit.411565 - https://github.com/41lai/cve/blob/main/add.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9083 State: PUBLISHED Published: 2024-09-22T08:31:05.017Z Last Updated: 2024-09-23T15:55:10.907Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Employee Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file /Admin/add-admin.php. The manipulation of the argument txtfullname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278253 - https://vuldb.com/?ctiid.278253 - https://vuldb.com/?submit.411568 - https://github.com/zz0zz0/CVE/blob/main/Employee%20Management%20System%20--XSS/Employee%20Management%20System%20--XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9084 State: PUBLISHED Published: 2024-09-22T09:00:07.251Z Last Updated: 2024-09-23T15:35:37.788Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file bbms.php. The manipulation of the argument fullname/age/bloodgroup/city/phno/gender as part of String leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278254 - https://vuldb.com/?ctiid.278254 - https://vuldb.com/?submit.411672 - https://github.com/ByKevin1/CVE/blob/main/xss1.md - https://code-projects.org/
CVE ID: CVE-2024-9085 State: PUBLISHED Published: 2024-09-22T07:47:57.895Z Last Updated: 2024-09-23T15:57:51.332Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Restaurant Reservation System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument date leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions sid as affected paramater which is incorrect. Additional A
lic and may be used. The initial researcher advisory mentions sid as affected paramater which is incorrect. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278261 - https://vuldb.com/?ctiid.278261 - https://vuldb.com/?submit.411848 - https://github.com/ppp-src/a/issues/18 - https://code-projects.org/
CVE ID: CVE-2024-9086 State: PUBLISHED Published: 2024-09-22T21:00:07.667Z Last Updated: 2024-09-23T15:30:43.842Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Restaurant Reservation System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. Affected is an unknown function of the file /filter.php. The manipulation of the argument from/to leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "from" to be affected. But it must be as
ic and may be used. The initial researcher advisory only mentions the parameter "from" to be affected. But it must be assumed that parameter "to" is affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278262 - https://vuldb.com/?ctiid.278262 - https://vuldb.com/?submit.411850 - https://github.com/ppp-src/a/issues/20 - https://code-projects.org/
CVE ID: CVE-2024-9087 State: PUBLISHED Published: 2024-09-22T22:00:06.081Z Last Updated: 2024-09-23T15:01:01.848Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Vehicle Management Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the file /edit1.php. The manipulation of the argument sno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278265 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278265 - https://vuldb.com/?ctiid.278265 - https://vuldb.com/?submit.411849 - https://github.com/ppp-src/a/issues/19 - https://code-projects.org/
CVE ID: CVE-2024-9088 State: PUBLISHED Published: 2024-09-22T22:00:09.006Z Last Updated: 2024-09-23T14:59:16.607Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Telecom Billing Management System Problem Types: CWE-120 Description: A vulnerability has been found in SourceCodester Telecom Billing Management System 1.0 and classified as critical. This vulnerability affects the function login. The manipulation of the argument uname leads to buffer overflow. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278266 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278266 - https://vuldb.com/?ctiid.278266 - https://vuldb.com/?submit.411854 - https://github.com/CveSecLook/cve/issues/61 - https://www.sourcecodester.com/
CVE ID: CVE-2024-9089 State: PUBLISHED Published: 2024-09-22T23:31:10.063Z Last Updated: 2024-09-23T14:43:27.601Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Modern Loan Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Modern Loan Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file update_loan_record.php. The manipulation of the argument amount leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278267 - https://vuldb.com/?ctiid.278267 - https://vuldb.com/?submit.411877 - https://www.shawroot.cc/2807.html - https://www.sourcecodester.com/
CVE ID: CVE-2024-9090 State: PUBLISHED Published: 2024-09-22T23:31:15.701Z Last Updated: 2024-09-23T14:49:10.042Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Modern Loan Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Modern Loan Management System 1.0. It has been classified as critical. Affected is an unknown function of the file search_member.php. The manipulation of the argument searchMember leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278268 - https://vuldb.com/?ctiid.278268 - https://vuldb.com/?submit.411879 - https://www.shawroot.cc/2810.html - https://www.sourcecodester.com/
CVE ID: CVE-2024-9091 State: PUBLISHED Published: 2024-09-23T00:00:07.696Z Last Updated: 2024-09-23T14:38:56.171Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Student Record System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Student Record System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument regno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278269 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278269 - https://vuldb.com/?ctiid.278269 - https://vuldb.com/?submit.411912 - https://github.com/ppp-src/a/issues/21 - https://code-projects.org/