Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225348. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225348 - https://vuldb.com/?ctiid.225348 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Cross%20site%20scripting%20attack%20at%20system%20name%20setting.pdf
CVE ID: CVE-2023-1962 State: PUBLISHED Published: 2023-04-09T08:00:05.147Z Last Updated: 2024-11-22T16:19:36.845Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Best Online News Portal Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225361 was assigned to
unched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225361 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225361 - https://vuldb.com/?ctiid.225361 - https://github.com/PEOIzEve/bug_report/blob/main/SQLi-1.md
CVE ID: CVE-2023-1963 State: PUBLISHED Published: 2023-04-09T08:00:06.739Z Last Updated: 2024-08-02T06:05:27.077Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php of the component Search. The manipulation of the argument searchinput leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225359. Additional
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225359. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225359 - https://vuldb.com/?ctiid.225359 - https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/search-locker-details.php_SQL_English.pdf
CVE ID: CVE-2023-1964 State: PUBLISHED Published: 2023-04-09T08:31:03.077Z Last Updated: 2025-02-07T19:37:35.562Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file recovery.php of the component Password Reset. The manipulation of the argument uname/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225360. Additional Analy
t has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225360. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225360 - https://vuldb.com/?ctiid.225360 - https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/password-recovery.php_SQL_English.pdf
CVE ID: CVE-2023-1965 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-29T21:40:33.282Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Cross-site request forgery (csrf) in GitLab Description: An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn't enabled by default. Additional Analyst Notes
cess tokens granted for 3rd party Group SAML SSO logins. This feature isn't enabled by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/406235 - https://hackerone.com/reports/1923672 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1965.json
CVE ID: CVE-2023-1966 State: PUBLISHED Published: 2023-04-28T18:06:51.431Z Last Updated: 2025-01-16T21:35:30.057Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Illumina Products: iScan Control Software, MiniSeq Control Software, iSeq 100, MiSeq Control Software, MiSeqDx Operating Software, NextSeq 500/550 Control Software, NextSeq 550Dx Control Software, NextSeq 550Dx Operating Software, NextSeq 1000/2000 Control Software, NovaSeq 6000 Control Software, NovaSeq Control Software Problem Types: CWE-250 Description: Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor
niversal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01 - https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
CVE ID: CVE-2023-1967 State: PUBLISHED Published: 2023-04-27T21:37:05.110Z Last Updated: 2025-01-16T21:25:11.428Z Vendors: Keysight Products: N8844A Data Analytics Web Service Problem Types: CWE-502 Deserialization of Untrusted Data Description: Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-115-01
CVE ID: CVE-2023-1968 State: PUBLISHED Published: 2023-04-28T18:09:17.372Z Last Updated: 2025-01-16T21:35:22.697Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Illumina Products: iScan Control Software, MiniSeq Control Software, iSeq 100, MiSeq Control Software, MiSeqDx Operating Software, NextSeq 500/550 Control Software, NextSeq 550Dx Control Software, NextSeq 550Dx Operating Software, NextSeq 1000/2000 Control Software, NovaSeq 6000 Control Software, NovaSeq Control Software Problem Types: CWE-1327 Description: Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious
na Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01 - https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
CVE ID: CVE-2023-1969 State: PUBLISHED Published: 2023-04-10T16:00:05.059Z Last Updated: 2024-08-02T06:05:27.088Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Eyewear Shop Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/manage_stock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225406 is the identifier assigned to this vulnerability. Additi
it has been disclosed to the public and may be used. VDB-225406 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225406 - https://vuldb.com/?ctiid.225406 - https://github.com/Gear-D/bug_report/blob/main/SQLi-1.md
CVE ID: CVE-2023-1970 State: PUBLISHED Published: 2023-04-10T16:00:06.500Z Last Updated: 2025-02-07T19:36:05.516Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: yuan1994 Products: tpAdmin Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\admin\controller\Upload.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225407. NOTE: This
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225407. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225407 - https://vuldb.com/?ctiid.225407 - https://tib36.github.io/2023/04/09/tpAdmin-RCE/
CVE ID: CVE-2023-1971 State: PUBLISHED Published: 2023-04-10T16:31:03.094Z Last Updated: 2024-08-02T06:05:27.101Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: yuan1994 Products: tpAdmin Problem Types: CWE-918 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12. Affected is the function remote of the file application\admin\controller\Upload.php. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225408. NOTE: This vulnerabil
been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225408. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225408 - https://vuldb.com/?ctiid.225408 - https://tib36.github.io/2023/04/09/tpAdmin-SSRF/
CVE ID: CVE-2023-1972 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-22T19:45:13.172Z Vendors: n/a Products: binutils Problem Types: CWE-119 Description: A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2185646 - https://sourceware.org/bugzilla/show_bug.cgi?id=30285 - https://security.gentoo.org/glsa/202309-15
CVE ID: CVE-2023-1973 State: PUBLISHED Published: 2024-11-07T10:01:57.995Z Last Updated: 2024-11-07T14:06:43.345Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Problem Types: CWE-20 Description: A flaw was found in Undertow package. Using the
e Application Platform 8.0 for RHEL 9 Problem Types: CWE-20 Description: A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, leading the server to an OutofMemory error, exhausting the server's memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1674 - https://access.redhat.com/errata/RHSA-2024:1675 - https://access.redhat.com/errata/RHSA-2024:1676 - https://access.redhat.com/errata/RHSA-2024:1677 - https://access.redhat.com/errata/RHSA-2024:2763 - https://access.redhat.com/errata/RHSA-2024:2764 - https://access.redhat.com/sec
ccess.redhat.com/errata/RHSA-2024:2763 - https://access.redhat.com/errata/RHSA-2024:2764 - https://access.redhat.com/security/cve/CVE-2023-1973 - https://bugzilla.redhat.com/show_bug.cgi?id=2185662
CVE ID: CVE-2023-1974 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-07T17:14:55.779Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-1230 Description: Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/answerdev/answer/commit/ac3f2f047ee00b4edaea7530e570ab67ff87cd6a - https://huntr.dev/bounties/852781c6-9cc8-4d25-9336-bf3cb8ee3439
CVE ID: CVE-2023-1975 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-07T17:14:37.065Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/829cab7a-4ed7-465c-aa96-29f4f73dbfff - https://github.com/answerdev/answer/commit/ac3f2f047ee00b4edaea7530e570ab67ff87cd6a
CVE ID: CVE-2023-1976 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-07T17:13:55.067Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-263 Description: Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af - https://huntr.dev/bounties/469bcabf-b315-4750-b63c-82ac86d153de
CVE ID: CVE-2023-1977 State: PUBLISHED Published: 2023-08-16T11:03:28.672Z Last Updated: 2024-10-08T19:08:16.135Z Vendors: Unknown Products: Booking Manager Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/842f3b1f-395a-4ea2-b7df-a36f70e8c790
CVE ID: CVE-2023-1978 State: PUBLISHED Published: 2023-06-09T05:33:29.864Z Last Updated: 2024-12-20T23:36:23.991Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: plainware Products: ShiftController Employee Shift Scheduling Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the query string in versions up to, and including, 4.9.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts
sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b5c61212-e68e-4198-b078-18121576b767?source=cve - https://plugins.trac.wordpress.org/changeset/2898274/shiftcontroller
CVE ID: CVE-2023-1979 State: PUBLISHED Published: 2023-05-08T16:28:53.574Z Last Updated: 2025-01-28T20:04:13.458Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Google Products: Web Stories for WordPress Problem Types: CWE-863 Description: The Web Stories for WordPress plugin supports the WordPress built-in functionality of protecting content with a password. The content is then only accessible to website visitors after entering the password. In WordPress, users with the "Author" role can create stories, but don't have the ability to edit password protected stories. The vulnerability allowed users with said role to bypass this permission check when trying t
password protected stories. The vulnerability allowed users with said role to bypass this permission check when trying to duplicate the protected story in the plugin's own dashboard, giving them access to the seemingly protected content. We recommend upgrading to version 1.32 or beyond commit ad49781c2a35c5c92ef704d4b621ab4e5cb77d68 https://github.com/GoogleForCreators/web-stories-wp/commit/ad49781c2a35c5c92ef704d4b621ab4e5cb77d68 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GoogleForCreators/web-stories-wp/commit/ad49781c2a35c5c92ef704d4b621ab4e5cb77d68 - https://github.com/GoogleForCreators/web-stories-wp/releases/tag/v1.32.0
CVE ID: CVE-2023-1980 State: PUBLISHED Published: 2023-04-11T17:44:15.373Z Last Updated: 2025-02-10T19:01:09.998Z Vendors: Devolutions Products: Remote Desktop Manager Description: Two factor authentication bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to cancel the two factor authentication via the application user interface and open entries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0009
CVE ID: CVE-2023-1981 State: PUBLISHED Published: 2023-05-26T00:00:00.000Z Last Updated: 2025-11-03T21:47:06.552Z Vendors: n/a Products: avahi Problem Types: CWE-400 Description: A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-1981 - https://bugzilla.redhat.com/show_bug.cgi?id=2185911 - https://github.com/lathiat/avahi/issues/375
CVE ID: CVE-2023-1982 State: PUBLISHED Published: 2023-08-30T14:22:03.333Z Last Updated: 2024-10-01T19:25:28.522Z Vendors: Unknown Products: Guest posting / Frontend Posting wordpress plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Front Editor WordPress plugin through 4.0.4 does not sanitize and escape some of its form settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/51987966-8007-4e12-bc2e-997b92054739
CVE ID: CVE-2023-1983 State: PUBLISHED Published: 2023-04-11T17:00:04.951Z Last Updated: 2024-08-02T06:05:27.115Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Sales Tracker Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manage_product.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225530 is the iden
he attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225530 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225530 - https://vuldb.com/?ctiid.225530 - https://github.com/graywar1/bug_report/blob/main/SQLi.md
CVE ID: CVE-2023-1984 State: PUBLISHED Published: 2023-04-11T17:31:03.568Z Last Updated: 2024-08-02T06:05:27.097Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Complaint Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/check_availability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225532.
otely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225532. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.225532 - https://vuldb.com/?ctiid.225532 - https://github.com/qinyiqun/bug_report/blob/main/SQLi.md
CVE ID: CVE-2023-1985 State: PUBLISHED Published: 2023-04-11T17:31:04.551Z Last Updated: 2024-08-02T06:05:27.094Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. This issue affects the function save_brand of the file /classes/Master.php?f=save_brand. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225533 was assigned to this vulnerabilit
he exploit has been disclosed to the public and may be used. The identifier VDB-225533 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225533 - https://vuldb.com/?ctiid.225533 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/1-SQL%20injection%20exists%20at%20the%20location%20where%20the%20brand%20list%20is%20added.pdf
CVE ID: CVE-2023-1986 State: PUBLISHED Published: 2023-04-11T18:00:09.249Z Last Updated: 2025-02-06T21:47:04.091Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function delete_order of the file /classes/master.php?f=delete_order. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225534 is the identifier assigned to this vulnerability.
exploit has been disclosed to the public and may be used. VDB-225534 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225534 - https://vuldb.com/?ctiid.225534 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/3-SQL%20injection%20exists%20at%20order%20deletion%20point.pdf