Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41365 State: PUBLISHED Published: 2023-10-10T01:35:57.645Z Last Updated: 2024-09-26T18:25:09.283Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP Business One (B1i) Problem Types: CWE-611 Description: SAP Business One (B1i) - version 10.0, allows an authorized attacker to retrieve the details stack trace of the fault message to conduct the XXE injection, which will lead to information disclosure. After successful exploitation, an attacker can cause limited impact on the confidentiality and no impact to the integrity and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
the integrity and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3338380 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-41366 State: PUBLISHED Published: 2023-11-14T01:01:07.759Z Last Updated: 2024-09-03T14:30:54.957Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver Application Server ABAP and ABAP Platform Problem Types: CWE-497 Description: Under certain condition SAP NetWeaver Application Server ABAP - versions KERNEL 722, KERNEL 7.53, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KERNEL 7.94, KERNEL64UC 7.22, KERNEL64UC 7.22EXT, KERNEL64UC 7.53, KERNEL64NUC 7.22, KERNEL64NUC 7.22EXT, allows an unauthenticated attacker to access the unintended data due to the lack of restrictions ap
KERNEL64NUC 7.22EXT, allows an unauthenticated attacker to access the unintended data due to the lack of restrictions applied which may lead to low impact in confidentiality and no impact on the integrity and availability of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3362849 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-41367 State: PUBLISHED Published: 2023-09-12T01:59:55.915Z Last Updated: 2024-09-26T14:38:15.247Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver (Guided Procedures) Problem Types: CWE-306 Description: Due to missing authentication check in webdynpro application, an unauthorized user in SAP NetWeaver (Guided Procedures) - version 7.50, can gain access to admin view of specific function anonymously. On successful exploitation of vulnerability under specific circumstances, attacker can view user’s email address. There is no integrity/availability impact. Additional Analyst Notes: - CVE Program Container: - CISA A
’s email address. There is no integrity/availability impact. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3348142 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-41368 State: PUBLISHED Published: 2023-09-12T01:59:39.205Z Last Updated: 2024-09-26T16:04:32.037Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: S4 HANA ABAP (Manage checkbook apps) Problem Types: CWE-639 Description: The OData service of the S4 HANA (Manage checkbook apps) - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating an update OData call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3355675 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-41369 State: PUBLISHED Published: 2023-09-12T01:59:03.570Z Last Updated: 2024-09-25T15:33:02.395Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP_SE Products: SAP S/4HANA (Create Single Payment application) Problem Types: CWE-611 Description: The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
s to slow down the browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3369680 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-41372 State: PUBLISHED Published: 2023-10-25T14:13:34.827Z Last Updated: 2024-09-12T14:28:34.281Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Rexroth Products: ctrlX HMI Web Panel - WR21 (WR2107), ctrlX HMI Web Panel - WR21 (WR2110), ctrlX HMI Web Panel - WR21 (WR2115) Problem Types: CWE-798 Description: The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to an attacker - controlled malicious server.This is possible by forging a valid broadcast intent encrypted with a hardcoded RSA key pair Additional Analyst Notes: -
This is possible by forging a valid broadcast intent encrypted with a hardcoded RSA key pair Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-175607.html
CVE ID: CVE-2023-41373 State: PUBLISHED Published: 2023-10-10T12:33:42.106Z Last Updated: 2024-09-19T13:37:18.452Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BIG-IP system. For BIG-IP system running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
d of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000135689
CVE ID: CVE-2023-41374 State: PUBLISHED Published: 2023-09-20T08:49:30.632Z Last Updated: 2024-09-24T19:06:38.696Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Kostac PLC Programming Software Problem Types: Double free Description: Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue exists in parsing of KPP project files. The vendor states that Kostac PLC Programming Software Version 1.6.10.0 or later implements the function which prevents a project file alteration. T
c PLC Programming Software Version 1.6.10.0 or later implements the function which prevents a project file alteration. Therefore, to mitigate the impact of these vulnerabilities, a project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier needs to be saved again using Kostac PLC Programming Software Version 1.6.10.0 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202309125391/ - https://jvn.jp/en/vu/JVNVU95282683/index.html
CVE ID: CVE-2023-41375 State: PUBLISHED Published: 2023-09-20T08:49:10.486Z Last Updated: 2024-09-24T19:08:52.394Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Kostac PLC Programming Software Problem Types: Use after free Description: Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue exists in parsing of KPP project files. The vendor states that Kostac PLC Programming Software Version 1.6.10.0 or later implements the function which prevents a project file alteration.
tac PLC Programming Software Version 1.6.10.0 or later implements the function which prevents a project file alteration. Therefore, to mitigate the impact of these vulnerabilities, a project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier needs to be saved again using Kostac PLC Programming Software Version 1.6.10.0 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202309125391/ - https://jvn.jp/en/vu/JVNVU95282683/index.html
CVE ID: CVE-2023-41376 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-02T14:41:35.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling - https://news.ycombinator.com/item?id=37305800 - https://www.nokia.com/networks/technologies/service-router-operating-system/
CVE ID: CVE-2023-41377 State: REJECTED Published: N/A Last Updated: 2023-11-01T14:01:55.734057 Description: No description available.
CVE ID: CVE-2023-41378 State: PUBLISHED Published: 2023-11-06T15:00:53.249Z Last Updated: 2024-09-05T13:40:37.794Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Calico, Tigera Products: Typha Problem Types: CWE-400, CWE-703 Description: In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() call is performed inside the main server handle for loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections
r loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections will be idle waiting for that handshake to finish. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tigera.io/security-bulletins-tta-2023-001/ - https://github.com/projectcalico/calico/pull/7908 - https://github.com/projectcalico/calico/pull/7993
CVE ID: CVE-2023-41387 State: PUBLISHED Published: 2023-09-19T00:00:00 Last Updated: 2024-09-25T14:23:26.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app's container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and LSSupportsOpeningDocumentsInPlace properties. As a result, local users can obtain the same attack primitives as remote attackers by tampering with the internal database of the framework on the device. Additional Analyst Notes: - CVE Program C
ackers by tampering with the internal database of the framework on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pub.dev/packages/flutter_downloader/changelog - https://seredynski.com/articles/exploiting-ios-apps-to-extract-session-tokens-and-overwrite-user-data
CVE ID: CVE-2023-41419 State: PUBLISHED Published: 2023-09-25T00:00:00.000Z Last Updated: 2025-11-25T00:11:09.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gevent/gevent/issues/1989 - https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c
CVE ID: CVE-2023-41423 State: PUBLISHED Published: 2023-09-12T00:00:00 Last Updated: 2024-09-26T14:27:39.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code via a crafted payload to the new article function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/terrylinooo/githuber-md/issues/316
CVE ID: CVE-2023-41425 State: PUBLISHED Published: 2023-11-07T00:00:00.000Z Last Updated: 2025-04-24T18:30:56.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://wondercms.com - https://gist.github.com/prodigiousMind/fc69a79629c4ba9ee88a7ad526043413
CVE ID: CVE-2023-41436 State: PUBLISHED Published: 2023-09-15T00:00:00 Last Updated: 2024-09-25T15:31:46.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sromanhu/CSZ-CMS-Stored-XSS---Pages-Content/blob/main/README.md
CVE ID: CVE-2023-41442 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-02T19:01:35.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component. Additional Analyst Notes: - CVE Program Container: References: - https://writeups.ayyappan.me/v/tor-iot-mqtt/
CVE ID: CVE-2023-41443 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:26:14.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Deng-JunFeng/cve-lists/tree/main/novel-plus/vuln
CVE ID: CVE-2023-41444 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-23T19:26:59.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privileges via the fun_1400084d0 function in IREC.sys driver. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.dru1d.ninja/windows-driver-exploit-development-irec-sys-a5eb45093945 - https://gist.github.com/dru1d-foofus/1af21179f253879f101c3a8d4f718bf0 - https://github.com/magicsword-io/LOLDrivers/blob/main/yaml/d74fdf19-b4b0-4ec2-9c29-4213b064138b.yml
CVE ID: CVE-2023-41445 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T13:26:02.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/84cac1b949bab0e4c587a668385b052d
CVE ID: CVE-2023-41446 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-23T17:58:22.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/4bb91170f8ee50b395427f26bc96a1f2
CVE ID: CVE-2023-41447 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-23T17:56:55.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/56b9fe4dcc3a248d4288bde5ffb3a5b3
CVE ID: CVE-2023-41448 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T13:25:36.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/458e17f24ebf7d8af3c5c4d7073347a0
CVE ID: CVE-2023-41449 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T13:17:46.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/c1ae240f2acec138132aa64ce3faa2e0
CVE ID: CVE-2023-41450 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-23T20:31:53.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/e11af10e1bd3606de8b568033d932589
CVE ID: CVE-2023-41451 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T13:17:19.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/062cfca2e293a0e7d24f5d55f8db3fde
CVE ID: CVE-2023-41452 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T13:16:48.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/32be1c4bae6f9378d4f382ba0c92b367
CVE ID: CVE-2023-41453 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T13:16:03.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ajaxnewsticker.com - http://phpkobo.com - https://gist.github.com/RNPG/be2ca92cb1f943d4c340c75fbfc9b783
CVE ID: CVE-2023-41471 State: PUBLISHED Published: 2025-08-29T00:00:00.000Z Last Updated: 2025-11-03T05:26:40.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write access to the server, and they can more simply upload HTML files containing JavaScript. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Trinity-SYT-SECURITY/XSS_vuln_issue/blob/main/copyparty.md - https://github.com/9001/copypart
nces: - https://github.com/Trinity-SYT-SECURITY/XSS_vuln_issue/blob/main/copyparty.md - https://github.com/9001/copyparty - https://github.com/9001/copyparty/releases/tag/v1.9.2
CVE ID: CVE-2023-41474 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-06-12T14:38:48.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensitive information via the javax.faces.resource component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/JBalanza/CVE-2023-41474
CVE ID: CVE-2023-41484 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:16:34.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eddieantonio/imgcat/issues/49
CVE ID: CVE-2023-41503 State: PUBLISHED Published: 2024-03-07T00:00:00.000Z Last Updated: 2025-04-16T15:53:50.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Enrollment In PHP v1.0 was discovered to contain a SQL injection vulnerability via the Login function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2023-41503/blob/main/CVE-26
CVE ID: CVE-2023-41504 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-05T13:49:34.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Search function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2023-41504/blob/main/CVE-25
CVE ID: CVE-2023-41505 State: PUBLISHED Published: 2024-03-13T00:00:00.000Z Last Updated: 2025-03-13T18:35:48.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2023-41505/blob/main/CVE-24
CVE ID: CVE-2023-41506 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-08-27T19:14:44.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2023-41506/blob/main/CVE-23