Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-2051 State: PUBLISHED Published: 2024-03-18T16:03:44.987Z Last Updated: 2024-08-28T15:04:28.061Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric, Schneider Electric Products: Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H , Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H, Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H Problem Types: CWE-307 Description: CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the login
account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the login form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-072-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-072-01.pdf
CVE ID: CVE-2024-2052 State: PUBLISHED Published: 2024-03-18T16:05:47.722Z Last Updated: 2024-08-15T16:23:48.504Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Schneider Electric, Schneider Electric Products: Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H , Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H, Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H Problem Types: CWE-552 Description: CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different lo
icated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-072-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-072-01.pdf
CVE ID: CVE-2024-2053 State: PUBLISHED Published: 2024-03-05T18:56:10.796Z Last Updated: 2025-02-13T17:32:33.055Z Vendors: Artica Tech Products: Artica Proxy Problem Types: CWE-23 Description: The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to prevent local file inclusion. These protections can be bypassed and arbitrary file requests supplied by unauthenticated users will be returned according to the privileges of the "www-data" user. Additional Analys
supplied by unauthenticated users will be returned according to the privileges of the "www-data" user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2024-001.txt - http://seclists.org/fulldisclosure/2024/Mar/11
CVE ID: CVE-2024-2054 State: PUBLISHED Published: 2024-03-05T18:56:22.972Z Last Updated: 2025-02-13T17:32:33.640Z Vendors: Artica Tech Products: Artica Proxy Problem Types: CWE-502 Description: The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2024-002.txt - http://seclists.org/fulldisclosure/2024/Mar/12
CVE ID: CVE-2024-2055 State: PUBLISHED Published: 2024-03-05T18:56:33.232Z Last Updated: 2025-02-13T17:32:34.287Z Vendors: Artica Tech Products: Artica Proxy Problem Types: CWE-288, CWE-552 Description: The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt - http://seclists.org/fulldisclosure/2024/Mar/13
CVE ID: CVE-2024-2056 State: PUBLISHED Published: 2024-03-05T18:57:03.524Z Last Updated: 2025-02-13T17:32:34.912Z Vendors: Artica Tech Products: Artica Proxy Problem Types: CWE-288, CWE-552 Description: Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Security issues associated with exposing this network service are documented at gvalkov's 'tailon' GitHub repo. Using the tailon service, the contents of any file on the Artica Proxy can be viewed. Additional Analyst Notes: - CV
po. Using the tailon service, the contents of any file on the Artica Proxy can be viewed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2024-004.txt - https://github.com/gvalkov/tailon#security - http://seclists.org/fulldisclosure/2024/Mar/14
CVE ID: CVE-2024-2057 State: PUBLISHED Published: 2024-03-01T11:31:04.385Z Last Updated: 2024-08-01T19:03:39.093Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: LangChain Products: langchain_community Problem Types: CWE-918 Description: A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.27 is able to addre
ack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.27 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-255372. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.255372 - https://vuldb.com/?ctiid.255372 - https://github.com/bayuncao/vul-cve-16 - https://github.com/bayuncao/vul-cve-16/tree/main/PoC.pkl - https://github.com/langchain-ai/langchain/pull/18695
CVE ID: CVE-2024-2058 State: PUBLISHED Published: 2024-03-01T10:12:20.887Z Last Updated: 2024-08-12T15:49:04.412Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Petrol Pump Management Software Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255373 was assigned to this vulnera
ly. The exploit has been disclosed to the public and may be used. The identifier VDB-255373 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.255373 - https://vuldb.com/?ctiid.255373 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Petrol%20pump%20management%20software/Unauthenticated%20Arbitrary%20File%20Upload.md - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/Surya2Developer%20Online_shopping_-system/SOURCECODESTER%20Petrol%20pump%20management%20software/Unauthenticated%20Arbitrary%20File%20Upload.md
CVE ID: CVE-2024-2059 State: PUBLISHED Published: 2024-03-01T11:31:05.750Z Last Updated: 2024-08-01T19:03:38.698Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Petrol Pump Management Software Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/service_crud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-255374 is the identifier assigned to this vulnerabilit
The exploit has been disclosed to the public and may be used. VDB-255374 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.255374 - https://vuldb.com/?ctiid.255374 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Petrol%20pump%20management%20software/service_crud.php%20Unauthenticated%20Arbitrary%20File%20Upload.md
CVE ID: CVE-2024-2060 State: PUBLISHED Published: 2024-03-01T12:31:04.004Z Last Updated: 2024-08-01T19:03:38.781Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Petrol Pump Management Software Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /admin/app/login_crud.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255375. Additional Analyst N
losed to the public and may be used. The associated identifier of this vulnerability is VDB-255375. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.255375 - https://vuldb.com/?ctiid.255375 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Petrol%20pump%20management%20software/login_crud.php%20SQL%20Injection.md
CVE ID: CVE-2024-2061 State: PUBLISHED Published: 2024-03-01T12:31:05.367Z Last Updated: 2024-08-08T20:52:31.873Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Petrol Pump Management Software Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown code of the file /admin/edit_supplier.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255376. Additional Analyst Notes: - CVE Program
the public and may be used. The identifier of this vulnerability is VDB-255376. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.255376 - https://vuldb.com/?ctiid.255376 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Petrol%20pump%20management%20software/edit_supplier.php%20SQL%20Injection.md
CVE ID: CVE-2024-2062 State: PUBLISHED Published: 2024-03-01T13:00:08.948Z Last Updated: 2024-08-22T18:03:38.529Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Petrol Pump Management Software Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. This issue affects some unknown processing of the file /admin/edit_categories.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255377 was assigned to this vulnerability. Additio
has been disclosed to the public and may be used. The identifier VDB-255377 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.255377 - https://vuldb.com/?ctiid.255377 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Petrol%20pump%20management%20software/edit_categories.php%20SQL%20Injection.md
CVE ID: CVE-2024-2063 State: PUBLISHED Published: 2024-03-01T13:00:10.450Z Last Updated: 2024-08-12T15:48:18.404Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Petrol Pump Management Software Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profile_crud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255378 is the identifier assigned to this vulnerability.
e exploit has been disclosed to the public and may be used. VDB-255378 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.255378 - https://vuldb.com/?ctiid.255378 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Petrol%20pump%20management%20software/profile_crud.php%20Unauthenticated%20STORED%20XSS.md
CVE ID: CVE-2024-2064 State: PUBLISHED Published: 2024-03-01T14:00:08.305Z Last Updated: 2024-08-01T19:03:38.528Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: rahman Products: SelectCours Problem Types: CWE-74 Description: A vulnerability has been found in rahman SelectCours 1.0 and classified as problematic. Affected by this vulnerability is the function getCacheNames of the file CacheController.java of the component Template Handler. The manipulation of the argument fragment leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255379.
exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255379. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.255379 - https://vuldb.com/?ctiid.255379 - https://github.com/Andriesces/SelectCours-_Sever-side-Template-injection/blob/main/README.md
CVE ID: CVE-2024-2065 State: PUBLISHED Published: 2024-03-01T14:31:04.557Z Last Updated: 2024-08-01T19:03:38.346Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Barangay Population Monitoring System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/update-resident.php. The manipulation of the argument full_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability
e launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255380. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.255380 - https://vuldb.com/?ctiid.255380 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Barangay%20Population%20Monitoring%20System/Stored%20XSS%20update-resident.php%20.md
CVE ID: CVE-2024-2066 State: PUBLISHED Published: 2024-03-01T14:31:05.926Z Last Updated: 2024-08-22T18:17:24.677Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Computer Inventory System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255381 was assigned to this vulnerability. Additional Ana
en disclosed to the public and may be used. The identifier VDB-255381 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.255381 - https://vuldb.com/?ctiid.255381 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Computer%20Inventory%20System%20Using%20PHP/STORED%20XSS%20add-computer.php%20.md
CVE ID: CVE-2024-2067 State: PUBLISHED Published: 2024-03-01T15:00:08.086Z Last Updated: 2024-08-01T19:03:38.490Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Computer Inventory System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-255382 is the identifier assigned to this vulnerability. Additional Analyst N
sclosed to the public and may be used. VDB-255382 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.255382 - https://vuldb.com/?ctiid.255382 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Computer%20Inventory%20System%20Using%20PHP/SQL%20Injection%20delete-computer.php%20.md
CVE ID: CVE-2024-2068 State: PUBLISHED Published: 2024-03-01T15:31:04.368Z Last Updated: 2024-08-01T19:03:38.421Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Computer Inventory System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /endpoint/update-computer.php. The manipulation of the argument model leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255383. Additional An
en disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255383. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.255383 - https://vuldb.com/?ctiid.255383 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Computer%20Inventory%20System%20Using%20PHP/STORED%20XSS%20upadte-computer.php%20.md
CVE ID: CVE-2024-2069 State: PUBLISHED Published: 2024-03-01T15:31:05.882Z Last Updated: 2024-08-08T20:51:41.422Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: FAQ Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester FAQ Management System 1.0. Affected is an unknown function of the file /endpoint/delete-faq.php. The manipulation of the argument faq leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255384. Additional Analyst Notes: - CVE Program Container: -
d may be used. The identifier of this vulnerability is VDB-255384. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.255384 - https://vuldb.com/?ctiid.255384 - https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/SOURCECODESTER%20%5BFAQ%20Management%20System%20Using%20PHP%20and%20MySQL%5D%20SQLi%20on%20delete-faq.php.md
CVE ID: CVE-2024-2070 State: PUBLISHED Published: 2024-03-01T16:00:07.399Z Last Updated: 2024-08-22T18:21:05.383Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: FAQ Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester FAQ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-faq.php. The manipulation of the argument question/answer leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255385 was assigned to this vulnerability. Additional An
een disclosed to the public and may be used. The identifier VDB-255385 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.255385 - https://vuldb.com/?ctiid.255385 - https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/SOURCECODESTER%20%5BFAQ%20Management%20System%20Using%20PHP%20and%20MySQL%5D%20XSS%20on%20add-faq.php.md
CVE ID: CVE-2024-2071 State: PUBLISHED Published: 2024-03-01T16:31:04.519Z Last Updated: 2024-08-08T18:37:16.081Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: FAQ Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester FAQ Management System 1.0. Affected by this issue is some unknown functionality of the component Update FAQ. The manipulation of the argument Frequently Asked Question leads to cross site scripting. The attack may be launched remotely. VDB-255386 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP
B-255386 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.255386 - https://vuldb.com/?ctiid.255386 - https://github.com/will121351/wenqin.webray.com.cn/blob/main/CVE-project/faq-management-system.md
CVE ID: CVE-2024-2072 State: PUBLISHED Published: 2024-03-01T17:00:06.711Z Last Updated: 2024-08-01T19:03:38.703Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Flashcard Quiz App Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Flashcard Quiz App 1.0. This affects an unknown part of the file /endpoint/update-flashcard.php. The manipulation of the argument question/answer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255387. Additional Analy
disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255387. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.255387 - https://vuldb.com/?ctiid.255387 - https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/SOURCECODESTER%20%5BFlashcard%20Quiz%20App%20Using%20PHP%20and%20MySQL%5D%20XSS%20on%20update-flashcard.php.md
CVE ID: CVE-2024-2073 State: PUBLISHED Published: 2024-03-01T17:00:08.429Z Last Updated: 2024-08-01T19:03:38.350Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Block Inserter for Dynamic Content Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This vulnerability affects unknown code of the file view_post.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255388. Additional Analyst Notes: - CISA AD