Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-8323 State: PUBLISHED Published: 2024-11-06T11:32:02.778Z Last Updated: 2024-11-06T13:20:15.498Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: fatcatapps Products: Pricing Tables WordPress Plugin – Easy Pricing Tables Problem Types: CWE-79 Description: The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages t
ossible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/68fb1fd3-16aa-467f-b5f6-a6126b05e088?source=cve - https://plugins.trac.wordpress.org/browser/easy-pricing-tables/trunk/includes/ept-block.php#L18 - https://wordpress.org/plugins/easy-pricing-tables/#developers - https://plugins.trac.wordpress.org/changeset/3181961/
CVE ID: CVE-2024-8324 State: PUBLISHED Published: 2024-10-01T08:30:17.967Z Last Updated: 2024-10-01T13:35:24.338Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ishitaka Products: XO Slider Problem Types: CWE-79 Description: The XO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘get_slider’ function in all versions up to, and including, 3.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CIS
itrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be51c54d-b0f7-42b2-b9b3-1b5832e10a6b?source=cve - https://plugins.trac.wordpress.org/browser/xo-liteslider/tags/3.8.6/inc/class-xo-slider.php#L247 - https://plugins.trac.wordpress.org/browser/xo-liteslider/tags/3.8.6/inc/class-xo-slider.php#L315
CVE ID: CVE-2024-8325 State: PUBLISHED Published: 2024-09-04T05:30:59.908Z Last Updated: 2024-09-04T13:17:28.405Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: blockspare Products: Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed Problem Types: CWE-79 Description: The Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in th
Imports, No Coding Needed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the ‘blockspare_render_social_sharing_block’ function in all versions up to, and including, 3.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c23995c6-989e-48d2-ba60-b0bf7b750245?source=cve - https://plugins.trac.wordpress.org/changeset/3145729/
CVE ID: CVE-2024-8326 State: PUBLISHED Published: 2024-12-17T09:22:40.988Z Last Updated: 2024-12-17T17:29:48.551Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: clavaque Products: s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions Problem Types: CWE-200 Description: The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 241114 via the 'sc_get_details' function. This makes it possible for authenticated attackers, with Contributor-level acc
241114 via the 'sc_get_details' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including user data and database configuration information, which can lead to reading, updating, or dropping database tables. The vulnerability was partially patched in version 241114. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/410d4ab0-22dd-4993-afbf-ae6193b70977?source=cve - https://plugins.trac.wordpress.org/browser/s2member/trunk/src/includes/classes/sc-gets-in.inc.php - https://plugins.trac.wordpress.org/browser/s2member/trunk/src/includes/classes/sc
/includes/classes/sc-gets-in.inc.php - https://plugins.trac.wordpress.org/browser/s2member/trunk/src/includes/classes/sc-gets.inc.php - https://plugins.trac.wordpress.org/changeset/3188157/ - https://plugins.trac.wordpress.org/changeset/3208315/
CVE ID: CVE-2024-8327 State: PUBLISHED Published: 2024-08-30T02:14:15.684Z Last Updated: 2024-08-30T14:43:49.035Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HWA JIUH DIGITAL TECHNOLOGY Products: Easy test Online Learning and Testing Platform Problem Types: CWE-89 Description: Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary SQL commands to read, modify, and delete database contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8028-360e1-1.html - ht
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8028-360e1-1.html - https://www.twcert.org.tw/en/cp-139-8032-a3d5c-2.html
CVE ID: CVE-2024-8328 State: PUBLISHED Published: 2024-08-30T02:20:50.472Z Last Updated: 2024-08-30T14:39:34.156Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: HWA JIUH DIGITAL TECHNOLOGY Products: Easy test Online Learning and Testing Platform Problem Types: CWE-79 Description: Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8028-360e1-1
tacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8028-360e1-1.html - https://www.twcert.org.tw/en/cp-139-8033-0a98f-2.html
CVE ID: CVE-2024-8329 State: PUBLISHED Published: 2024-08-30T02:24:46.598Z Last Updated: 2024-08-30T14:15:08.118Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Gether Technology Products: 6SHR System Problem Types: CWE-89 Description: 6SHR system from Gether Technology does not properly validate the specific page parameter, allowing remote attackers with regular privilege to inject SQL command to read, modify, and delete database contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8030-e2eac-1.html - https://www.twcert.org.tw/en/cp-139-8034-657b7-2.html
CVE ID: CVE-2024-8330 State: PUBLISHED Published: 2024-08-30T02:29:45.668Z Last Updated: 2024-08-30T14:13:45.691Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Gether Technology Products: 6SHR System Problem Types: CWE-434 Description: 6SHR system from Gether Technology does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload web shell scripts and use them to execute arbitrary system commands on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8031-a2f21-1.html - https://www.twcert.org.tw/en/cp-139-8035-53926-2.html
CVE ID: CVE-2024-8331 State: PUBLISHED Published: 2024-08-30T11:00:08.995Z Last Updated: 2024-08-30T14:47:40.348Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-89 Description: A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been classified as critical. This affects an unknown part of the file /admin/user/user-move-run.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276207 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276207 - https://vuldb.com/?ctiid.276207 - https://vuldb.com/?submit.398769 - https://gitee.com/A0kooo/cve_article/blob/master/RapidCMS/SQL%20injection1/rapidcms%20user-move-run.php%20SQL%20injection.md
CVE ID: CVE-2024-8332 State: PUBLISHED Published: 2024-08-30T12:00:06.006Z Last Updated: 2024-08-30T14:46:00.666Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: master-nan Products: Sweet-CMS Problem Types: CWE-89 Description: A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been declared as critical. This vulnerability affects unknown code of the file /table/index. The manipulation leads to sql injection. The attack can be initiated remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 146359
delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 146359646a5a90cb09156dbd0013b7df77f2aa6c. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276208 - https://vuldb.com/?ctiid.276208 - https://vuldb.com/?submit.398803 - https://github.com/master-nan/sweet-cms/issues/1 - https://github.com/master-nan/sweet-cms/issues/2 - https://github.com/master-nan/sweet-cms/commit/146359646a5a90cb09156dbd0013b7df77f2aa6c
CVE ID: CVE-2024-8333 State: REJECTED Published: N/A Last Updated: 2024-08-30T05:30:44.741Z Description: No description available.
CVE ID: CVE-2024-8334 State: PUBLISHED Published: 2024-08-30T12:31:05.079Z Last Updated: 2024-08-30T13:16:23.875Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: master-nan Products: Sweet-CMS Problem Types: CWE-117 Description: A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been rated as problematic. This issue affects the function LogHandler of the file middleware/log.go. The manipulation leads to improper output neutralization for logs. The attack may be initiated remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected an
roduct takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier of the patch is 2024c370e6c78b07b358c9d4257fa5d1be732c38. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276209 - https://vuldb.com/?ctiid.276209 - https://vuldb.com/?submit.398805 - https://github.com/master-nan/sweet-cms/issues/3 - https://github.com/master-nan/sweet-cms/issues/3#issuecomment-2314447003 - https://github.com/master-nan/sweet-cms/commit/2024c370e6c78b07b358c9d4257fa5d1be732c38
CVE ID: CVE-2024-8335 State: PUBLISHED Published: 2024-08-30T12:31:31.646Z Last Updated: 2024-08-30T13:09:47.680Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276210 - https://vuldb.com/?ctiid.276210 -
Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276210 - https://vuldb.com/?ctiid.276210 - https://vuldb.com/?submit.399005 - https://gitee.com/A0kooo/cve_article/blob/master/RapidCMS/SQL%20injection2/rapidcms%20runlogon.php%20SQL%20injection.md
CVE ID: CVE-2024-8336 State: PUBLISHED Published: 2024-08-30T13:31:04.994Z Last Updated: 2024-08-30T13:58:18.311Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Music Gallery Site Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=delete_music. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276211 - https://vuldb.com/?ctiid.276211 - https://vuldb.com/?submit.399039 - https://github.com/LiuHaoBin6/cve/blob/main/sql5.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8337 State: PUBLISHED Published: 2024-08-30T13:31:06.423Z Last Updated: 2024-09-17T08:40:35.242Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Contact Manager with Export to VCF Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contact_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276212 - https://vuldb.com/?ctiid.276212 - https://vuldb.com/?submit.399338 - https://github.com/gurudattch/CVEs/blob/main/SourceCodester-Contact-managemet-system-Stored-XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8338 State: PUBLISHED Published: 2024-08-30T14:31:04.161Z Last Updated: 2024-08-30T18:14:15.809Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: HFO4 Products: shudong-share Problem Types: CWE-434 Description: A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /includes/fileReceive.php of the component File Extension Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer
oit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276217 - https://vuldb.com/?ctiid.276217 - https://vuldb.com/?submit.399538 - https://github.com/enjoyworld/webray.com.cn/blob/main/cves/shudong-share%20Any%20File%20Upload.md
CVE ID: CVE-2024-8339 State: PUBLISHED Published: 2024-08-30T14:31:06.157Z Last Updated: 2024-08-30T18:12:34.495Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Electric Billing Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
ay be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276218 - https://vuldb.com/?ctiid.276218 - https://vuldb.com/?submit.399540 - https://github.com/enjoyworld/webray.com.cn/blob/main/cves/Electric%20Billing%20Management%20System/Electric%20Billing%20Managemen%20SQL-inject%20System%20tracks.php%20SQL-inject.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8340 State: PUBLISHED Published: 2024-08-30T15:00:05.498Z Last Updated: 2024-09-06T16:20:28.313Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Electric Billing Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276219 - https://vuldb.com/?ctiid.276219 - https://vuldb.com/?submit.399548 - https://github.com/enjoyworld/webray.com.cn/blob/main/cves/Electric%20Billing%20Management%20System/Electric%20Billing%20Managemen%20SQL-inject%20System%20Action.php%20SQL-inject.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8341 State: PUBLISHED Published: 2024-08-30T15:00:07.611Z Last Updated: 2024-08-30T15:06:56.535Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Petshop Management System Problem Types: CWE-434 Description: A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of the file /controllers/add_user.php. The manipulation of the argument avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2762
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276220 - https://vuldb.com/?ctiid.276220 - https://vuldb.com/?submit.399661 - https://github.com/enjoyworld/webray.com.cn/blob/main/cves/Petshop_Management_System/Petshop_Management_System%20add_user.php%20any%20file%20upload.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8342 State: PUBLISHED Published: 2024-08-30T15:31:04.833Z Last Updated: 2024-08-30T15:50:52.562Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Petshop Management System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Petshop Management System 1.0. This issue affects some unknown processing of the file /controllers/add_client.php. The manipulation of the argument image_profile leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276221 - https://vuldb.com/?ctiid.276221 - https://vuldb.com/?submit.399662 - https://github.com/enjoyworld/webray.com.cn/blob/main/cves/Petshop_Management_System/Petshop_Management_System%20add_client.php%20any%20file%20upload.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8343 State: PUBLISHED Published: 2024-08-30T16:00:04.809Z Last Updated: 2024-08-30T16:36:22.594Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Sentiment Based Movie Rating System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Sentiment Based Movie Rating System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save_client of the component User Registration Handler. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analys
possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276222 - https://vuldb.com/?ctiid.276222 - https://vuldb.com/?submit.399711 - https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-SQLi-Sentiment-Based-Moive-Rating.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8344 State: PUBLISHED Published: 2024-08-30T16:31:05.095Z Last Updated: 2024-08-30T16:51:34.248Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Supplier Management System Problem Types: CWE-89 Description: A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_area.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276223 - https://vuldb.com/?ctiid.276223 - https://vuldb.com/?submit.400185 - https://github.com/yooo0oo0/cve_report/blob/main/supplier-management-system/SQLi-2.md - https://www.campcodes.com/
CVE ID: CVE-2024-8345 State: PUBLISHED Published: 2024-08-30T17:00:05.545Z Last Updated: 2024-08-30T18:09:11.624Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Music Gallery Site Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276224 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276224 - https://vuldb.com/?ctiid.276224 - https://vuldb.com/?submit.400192 - https://github.com/GAO-UNO/cve/blob/main/sql3.md - https://www.sourcecodester.com/