Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ia a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6b978749-7ea5-45f4-9f69-66a19c0e39ca - https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2 - https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/tags/4.5.4/inc/class.metaseo-admin.php
CVE ID: CVE-2023-1029 State: PUBLISHED Published: 2023-02-24T19:25:31.865Z Last Updated: 2025-01-13T17:04:27.631Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: joomunited Products: WP Meta SEO Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the regenerateSitemaps function. This makes it possible for unauthenticated attackers to regenerate Sitemaps via a forged request granted they can trick a site administrator into performing an action such as clicking on a l
emaps via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/764aec73-f291-4372-9dde-812ffaf025ed - https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2
CVE ID: CVE-2023-1030 State: PUBLISHED Published: 2023-02-24T19:36:54.136Z Last Updated: 2025-04-03T08:28:48.240Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester, code-projects Products: Online Boat Reservation System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may
leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221755 - https://vuldb.com/?ctiid.221755 - https://vuldb.com/?submit.94112 - https://github.com/jidle123/bug_report/blob/main/vendors/winex01/Online%20Boat%20Reservation%20System/XSS-1.md#online-boat-reservation-system-v10-by-winex01-has-cross-site-scripting-reflected
CVE ID: CVE-2023-1031 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T14:43:52.864Z Vendors: n/a Products: MonicaHQ Problem Types: Stored cross-site scripting (XSS) Description: MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `settings` endpoint and first_name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/napoli - https://www.monicahq.com/
CVE ID: CVE-2023-1032 State: PUBLISHED Published: 2024-01-08T18:11:31.951Z Last Updated: 2024-08-27T15:48:22.031Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H) Vendors: The Linux Kernel Organization Products: linux Problem Types: CWE-415 Description: The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2023/03/13/2 - https://cve.mitre
ner: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2023/03/13/2 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1032 - https://ubuntu.com/security/notices/USN-6033-1 - https://ubuntu.com/security/notices/USN-6024-1 - https://ubuntu.com/security/notices/USN-5977-1
CVE ID: CVE-2023-1033 State: PUBLISHED Published: 2023-02-25T00:00:00.000Z Last Updated: 2025-03-11T15:37:34.913Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) Vendors: froxlor Products: froxlor/froxlor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/ba3cd929-8b60-4d8d-b77d-f28409ecf387 - https://github.com/froxlor/froxlor/commit/4003a8d2b60728a77476d1d4f5aa5c635f128950
CVE ID: CVE-2023-1034 State: PUBLISHED Published: 2023-02-25T00:00:00.000Z Last Updated: 2025-03-11T15:36:18.715Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: salesagility Products: salesagility/suitecrm Problem Types: CWE-29 Description: Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0c1365bc-8d9a-4ae0-8b55-615d492b3730 - https://github.com/salesagility/suitecrm/commit/c19f221a41706efc8d73cef95c5e362c4f86bf06
CVE ID: CVE-2023-1035 State: PUBLISHED Published: 2023-02-25T07:47:18.533Z Last Updated: 2024-08-02T05:32:46.173Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. Affected is an unknown function of the file update_user.php. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221784. Additional Analyst Notes:
disclosed to the public and may be used. The identifier of this vulnerability is VDB-221784. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221784 - https://vuldb.com/?ctiid.221784 - https://github.com/E1CHO/cve_hub/blob/main/clinics%20patient%20management%20system/clinics-patient-management-system%20vlun2.pdf
CVE ID: CVE-2023-1036 State: PUBLISHED Published: 2023-02-26T11:49:57.972Z Last Updated: 2024-11-22T21:53:49.653Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Dental Clinic Appointment Reservation System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-2217
scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221794 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221794 - https://vuldb.com/?ctiid.221794 - https://github.com/nightcloudos/bug_report/blob/main/vendors/jkev/Dental%20Clinic%20Appointment%20Reservation%20System/XSS-1.md
CVE ID: CVE-2023-1037 State: PUBLISHED Published: 2023-02-26T11:49:59.558Z Last Updated: 2024-08-02T05:32:46.312Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Dental Clinic Appointment Reservation System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated ide
. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221795. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221795 - https://vuldb.com/?ctiid.221795 - https://github.com/nightcloudos/bug_report/blob/main/vendors/jkev/Dental%20Clinic%20Appointment%20Reservation%20System/SQLi-1.md
CVE ID: CVE-2023-1038 State: PUBLISHED Published: 2023-02-26T11:51:42.552Z Last Updated: 2024-08-02T05:32:46.321Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Reviewer Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Affected is an unknown function of the file /reviewer_0/admins/assessments/pretest/questions-view.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-22179
emotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221796. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221796 - https://vuldb.com/?ctiid.221796 - https://github.com/believeti/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/SQLi-1.md
CVE ID: CVE-2023-1039 State: PUBLISHED Published: 2023-02-26T11:53:20.162Z Last Updated: 2024-08-02T05:32:46.383Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Class and Exam Timetabling System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221797 was
k can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221797 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221797 - https://vuldb.com/?ctiid.221797 - https://github.com/anquanclub/bug_report/blob/main/vendors/Cherylda%20Jardeliza%20Ohiman/Class%20and%20Exam%20Timetabling%20System/SQLi-1.md
CVE ID: CVE-2023-1040 State: PUBLISHED Published: 2023-02-26T11:55:02.741Z Last Updated: 2024-08-02T05:32:46.467Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Graduate Tracer System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/add_acc.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-221798 is the identifier assigned to this vulnerability. Add
ploit has been disclosed to the public and may be used. VDB-221798 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221798 - https://vuldb.com/?ctiid.221798 - https://blog.csdn.net/weixin_43864034/article/details/129228718
CVE ID: CVE-2023-1041 State: PUBLISHED Published: 2023-02-26T11:57:58.666Z Last Updated: 2024-08-02T05:32:46.350Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Responsive Tourism Website Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Simple Responsive Tourism Website 1.0. This affects an unknown part of the file /tourism/rate_review.php. The manipulation of the argument id with the input 1"><script>alert(1111)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identi
ble to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221799. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221799 - https://vuldb.com/?ctiid.221799 - https://github.com/verylazycat/bug_report/blob/main/vendors/oretnom23/Simple%20Responsive%20Tourism%20Website/XSS-1.md
CVE ID: CVE-2023-1042 State: PUBLISHED Published: 2023-02-26T12:00:47.430Z Last Updated: 2025-03-11T15:24:42.956Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Pet Shop We App Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /pet_shop/admin/orders/update_status.php. The manipulation of the argument oid with the input 1"><script>alert(1111)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulne
ck can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221800. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221800 - https://vuldb.com/?ctiid.221800 - https://github.com/hujianjie123/bug_report/blob/main/vendors/oretnom23/Online%20Pet%20Shop%20We%20App/XSS-1.md
CVE ID: CVE-2023-1043 State: PUBLISHED Published: 2023-02-26T12:20:47.327Z Last Updated: 2025-02-27T21:00:46.501Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: MuYuCMS Problem Types: CWE-23 Description: A vulnerability was found in MuYuCMS 2.2. It has been classified as problematic. Affected is an unknown function of the file /editor/index.php. The manipulation of the argument dir_path leads to relative path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221802 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA
VDB-221802 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221802 - https://vuldb.com/?ctiid.221802 - https://github.com/MuYuCMS/MuYuCMS/issues/4
CVE ID: CVE-2023-1044 State: PUBLISHED Published: 2023-02-26T12:20:49.107Z Last Updated: 2024-08-02T05:32:46.346Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: MuYuCMS Problem Types: CWE-23 Description: A vulnerability was found in MuYuCMS 2.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /editor/index.php. The manipulation of the argument file_path leads to relative path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221803. Additional Analyst Notes: - CVE Program
and may be used. The associated identifier of this vulnerability is VDB-221803. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221803 - https://vuldb.com/?ctiid.221803 - https://github.com/MuYuCMS/MuYuCMS/issues/5
CVE ID: CVE-2023-1045 State: PUBLISHED Published: 2023-02-26T12:20:51.002Z Last Updated: 2024-08-02T05:32:46.349Z Severity: N/A (CVSS 4.7 AV:N/AC:L/Au:M/C:N/I:P/A:P) Vendors: n/a Products: MuYuCMS Problem Types: CWE-23 Description: A vulnerability was found in MuYuCMS 2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin.php/accessory/filesdel.html. The manipulation of the argument filedelur leads to relative path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221804. Additional Analyst Notes: - CVE Program Container: References:
sed. The identifier of this vulnerability is VDB-221804. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221804 - https://vuldb.com/?ctiid.221804 - https://github.com/MuYuCMS/MuYuCMS/issues/6
CVE ID: CVE-2023-1046 State: PUBLISHED Published: 2023-02-26T12:20:53.065Z Last Updated: 2024-08-02T05:32:46.339Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: MuYuCMS Problem Types: CWE-918 Description: A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221805 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuld
221805 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221805 - https://vuldb.com/?ctiid.221805 - https://github.com/MuYuCMS/MuYuCMS/issues/7
CVE ID: CVE-2023-1047 State: PUBLISHED Published: 2023-02-26T12:25:51.608Z Last Updated: 2024-11-22T21:53:11.788Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: TechPowerUp Products: RealTemp Problem Types: CWE-665 Description: A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown code in the library WinRing0x64.sys. The manipulation leads to improper initialization. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-221806 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221806 - https://vuldb.com/?ctiid.221806 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1047
CVE ID: CVE-2023-1048 State: PUBLISHED Published: 2023-02-26T12:25:53.686Z Last Updated: 2024-08-02T05:32:46.247Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: TechPowerUp Products: Ryzen DRAM Calculator Problem Types: CWE-665 Description: A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in the library WinRing0x64.sys. The manipulation leads to improper initialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221807. Additional
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221807. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221807 - https://vuldb.com/?ctiid.221807 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1048
CVE ID: CVE-2023-1049 State: PUBLISHED Published: 2023-06-14T07:27:59.794Z Last Updated: 2025-01-02T20:43:15.380Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: EcoStruxure™ Operator Terminal Expert, Pro-face BLUE Problem Types: CWE-94 Description: A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-164-01&p_enD
r: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-164-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-164-01.pdf
CVE ID: CVE-2023-1050 State: PUBLISHED Published: 2023-03-23T06:09:47.644Z Last Updated: 2025-03-04T21:23:37.953Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: As Koc Energy Products: Web Report System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection.This issue affects Web Report System: before 23.03.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0166
CVE ID: CVE-2023-1051 State: PUBLISHED Published: 2023-03-23T06:12:01.259Z Last Updated: 2025-03-04T21:22:51.652Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: As Koc Energy Products: Web Report System Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web Report System allows Reflected XSS.This issue affects Web Report System: before 23.03.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0166
CVE ID: CVE-2023-1053 State: PUBLISHED Published: 2023-02-27T10:43:49.857Z Last Updated: 2024-08-02T05:32:46.358Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Music Gallery Site Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. This issue affects some unknown processing of the file view_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221819. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221819 - https://vuldb.com/?c
19. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221819 - https://vuldb.com/?ctiid.221819
CVE ID: CVE-2023-1054 State: PUBLISHED Published: 2023-02-27T10:43:51.919Z Last Updated: 2025-03-11T19:18:37.826Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Music Gallery Site Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=user/manage. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221820. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.22
1820. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221820 - https://vuldb.com/?ctiid.221820