Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10711 State: PUBLISHED Published: 2024-11-05T08:31:37.174Z Last Updated: 2024-11-05T14:57:09.524Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ithemelandco Products: WooCommerce Report Problem Types: CWE-352 Description: The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update arbitrary options that can be leveraged for privilege escalation via a forged request granted they can trick a site administrator into perfo
at can be leveraged for privilege escalation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d1d21339-3a86-4bee-be86-2d2ab9190b26?source=cve - https://wordpress.org/plugins/ithemelandco-woo-report/#developers - https://ithemelandco.com/docs/woocommerce-report/ - https://plugins.trac.wordpress.org/browser/ithemelandco-woo-report/trunk/class/setting_report.php#L1174 - https://plugins.trac.wordpress.org/changeset/3181117/
CVE ID: CVE-2024-10713 State: PUBLISHED Published: 2025-03-20T10:08:47.112Z Last Updated: 2025-10-15T12:49:24.997Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: szad670401 Products: szad670401/hyperlpr Problem Types: CWE-770 Description: A vulnerability in szad670401/hyperlpr v3.0 allows for a Denial of Service (DoS) attack. The server fails to handle excessive characters appended to the end of multipart boundaries, regardless of the character used. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary, leading to excessive resource consumption and a complete denial of service for all users. T
at the end of the boundary, leading to excessive resource consumption and a complete denial of service for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/d5404069-95b3-40e0-a7a4-c3a183d861b0
CVE ID: CVE-2024-10714 State: PUBLISHED Published: 2025-03-20T10:10:35.654Z Last Updated: 2025-10-15T12:49:25.646Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-770 Description: A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS) by adding excessive characters to the end of a multipart boundary during file upload. This results in the server continuously processing each character and displaying warnings, rendering the application inaccessible. The issue occurs when the terminal shows a warning: 'multipart.multipart Consuming a byte '
he application inaccessible. The issue occurs when the terminal shows a warning: 'multipart.multipart Consuming a byte '0x2d' in end state'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/3e25b76c-714f-4948-8f5a-0ec9a6500068
CVE ID: CVE-2024-10715 State: PUBLISHED Published: 2024-11-06T11:00:29.115Z Last Updated: 2024-11-06T11:28:41.670Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: chrisvrichardson Products: MapPress Maps for WordPress Problem Types: CWE-79 Description: The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whe
cated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8d966924-aeab-4397-9555-78291af70efe?source=cve - https://plugins.trac.wordpress.org/changeset/3180900/mappress-google-maps-for-wordpress
CVE ID: CVE-2024-10716 State: PUBLISHED Published: 2024-12-05T15:28:29.644Z Last Updated: 2024-12-05T16:30:58.223Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: Pegasystems Products: Pega Infinity Problem Types: CWE-79 Description: Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.pega.com/support-doc/pega-security-advisory-e24-vulnerability-remediation-note
CVE ID: CVE-2024-10717 State: PUBLISHED Published: 2024-11-13T02:02:34.273Z Last Updated: 2024-11-13T15:45:40.051Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: wpmonks Products: Styler for Ninja Forms Problem Types: CWE-862 Description: The Styler for Ninja Forms plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the deactivate_license function in all versions up to, and including, 3.3.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to de
Subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users. Note: This issue can also be used to add arbitrary options with an empty value. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a26da53c-4be0-4c9f-9caf-05f054a6d5e7?source=cve - https://plugins.trac.wordpress.org/browser/styler-for-ninja-forms-lite/tags/3.3.4/admin-menu/licenses.php#L126
CVE ID: CVE-2024-10718 State: PUBLISHED Published: 2025-03-20T10:10:07.285Z Last Updated: 2025-03-20T18:31:14.232Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-614 Description: In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed in version 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/725bce8f-328f-4fbc-acf5-46ea920cd3c1 - https://github.com/phpipa
Vulnrichment: References: - https://huntr.com/bounties/725bce8f-328f-4fbc-acf5-46ea920cd3c1 - https://github.com/phpipam/phpipam/commit/ddf70ef6801442eb8b0be5eea829e470e653c70e
CVE ID: CVE-2024-10719 State: PUBLISHED Published: 2025-03-20T10:10:07.646Z Last Updated: 2025-03-20T18:31:08.165Z Severity: LOW (CVSS 2.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam version 1.5.2, specifically in the circuits options functionality. This vulnerability allows an attacker to inject malicious scripts via the 'option' parameter in the POST request to /phpipam/app/admin/circuits/edit-options-submit.php. The injected script can be executed in the context of the user's browser, leading to potential cookie theft and end-user file disclos
script can be executed in the context of the user's browser, leading to potential cookie theft and end-user file disclosure. The issue is fixed in version 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/56aba8cb-4da1-44b4-8c4d-c5ba00ea3670 - https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731
CVE ID: CVE-2024-10720 State: PUBLISHED Published: 2025-03-20T10:10:32.703Z Last Updated: 2025-03-20T18:20:08.111Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability occurs in the 'Device Management' section under 'Administration' where an attacker can inject malicious scripts into the 'Name' and 'Description' fields when adding a new device type. This can lead to data theft, account compromise, distribution of malware, website defacement, and phishing attacks. The issue is fixed in versi
heft, account compromise, distribution of malware, website defacement, and phishing attacks. The issue is fixed in version 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/75e06e05-7f69-4938-a83c-1dcc98922188 - https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731
CVE ID: CVE-2024-10721 State: PUBLISHED Published: 2025-03-20T10:11:07.493Z Last Updated: 2025-03-20T13:35:03.620Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which can be executed in the context of other users who view the affected page. The issue occurs in the circuits options page (https://demo.phpipam.net/tools/circuits/options/). An attacker can exploit this vulnerability to steal cookies, gain unauth
ps://demo.phpipam.net/tools/circuits/options/). An attacker can exploit this vulnerability to steal cookies, gain unauthorized access to user accounts, or redirect users to malicious websites. The vulnerability has been fixed in version 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/a440a003-84c9-47b5-bfbd-675564abe3d8 - https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731
CVE ID: CVE-2024-10722 State: PUBLISHED Published: 2025-03-20T10:10:29.411Z Last Updated: 2025-03-20T18:20:56.040Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distribution of malware, website defacement, content manipulation, and phishing attacks. The issue is fixed in version 1.7.0. Additional Analyst Not
site defacement, content manipulation, and phishing attacks. The issue is fixed in version 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/f0bc97b2-33a9-4b15-aa05-ff7c57624847 - https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731
CVE ID: CVE-2024-10723 State: PUBLISHED Published: 2025-03-20T10:09:23.803Z Last Updated: 2025-03-20T18:55:33.336Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the destination address field of the NAT tool, which can be executed when a user interacts with the field. The impact of this vulnerability includes the potential theft of user cookies, unauthorized access to user accounts, and redirection to malicious websites. The
s the potential theft of user cookies, unauthorized access to user accounts, and redirection to malicious websites. The issue has been fixed in version 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/9af99057-e4f6-4d07-b3bb-3213b977801d - https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731
CVE ID: CVE-2024-10724 State: PUBLISHED Published: 2025-03-20T10:09:30.561Z Last Updated: 2025-03-20T18:38:13.642Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address. This vulnerability allows an attacker to execute malicious code. The issue is fixed in version 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/0746e357-fcc7-44db-b8e7-857875c54999 - https://github.com/phpi
DP Vulnrichment: References: - https://huntr.com/bounties/0746e357-fcc7-44db-b8e7-857875c54999 - https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731
CVE ID: CVE-2024-10725 State: PUBLISHED Published: 2025-03-20T10:09:15.972Z Last Updated: 2025-03-20T18:57:09.070Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which are then executed in the context of other users who view the affected pages. The issue occurs when editing the NAT destination address, where user input is not properly sanitized. This can lead to data theft, account compromise, and other malicious act
ss, where user input is not properly sanitized. This can lead to data theft, account compromise, and other malicious activities. The vulnerability is fixed in version 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/343465fa-6dec-40af-a012-7b118e91a771 - https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731
CVE ID: CVE-2024-10726 State: PUBLISHED Published: 2024-11-21T02:06:27.940Z Last Updated: 2024-11-21T11:30:10.738Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: mainichiweb Products: Friendly Functions for Welcart Problem Types: CWE-352 Description: The Friendly Functions for Welcart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action su
ject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/305f2f13-178d-4b49-b59b-abb35d111299?source=cve - https://plugins.trac.wordpress.org/browser/friendly-functions-for-welcart/tags/1.2.4/ffw_function_settings.php#L57 - https://wordpress.org/plugins/friendly-functions-for-welcart/#developers
CVE ID: CVE-2024-10727 State: PUBLISHED Published: 2025-03-20T10:10:58.253Z Last Updated: 2025-03-20T15:53:17.600Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manner. This allows an attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to full compromise of the user. Additional Analyst Notes: - C
in the context of the user's browser, potentially leading to full compromise of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/259eed22-4d6f-4229-92e5-04674f302d5d - https://github.com/phpipam/phpipam/commit/c1697bb6c4e4a6403d69c0868e1eb1040f98b731
CVE ID: CVE-2024-10728 State: PUBLISHED Published: 2024-11-16T04:29:15.146Z Last Updated: 2024-11-19T16:06:27.550Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wpxpo Products: Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX Problem Types: CWE-862 Description: The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'install_required_plugin_callback' function in all versions up to, and including, 4.1.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activat
1.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/076f36fb-c2fb-43e0-a027-1351d3995489?source=cve - https://plugins.trac.wordpress.org/browser/ultimate-post/tags/4.1.16/classes/Importer.php#L94 - https://plugins.trac.wordpress.org/browser/ultimate-post/tags/4.1.16/classes/Initialization.php#L330 - https://wordpress.org/plugins/ultimate-post/ - https://plugins.trac.wordpre
ags/4.1.16/classes/Initialization.php#L330 - https://wordpress.org/plugins/ultimate-post/ - https://plugins.trac.wordpress.org/changeset/3188636/ultimate-post/trunk/classes/Importer.php
CVE ID: CVE-2024-10729 State: PUBLISHED Published: 2024-11-26T02:06:33.565Z Last Updated: 2024-11-26T15:11:56.622Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Tyche Softwares Products: Booking & Appointment Plugin for WooCommerce Problem Types: CWE-285 Description: The Booking & Appointment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_google_calendar_data' function in versions up to, and including, 6.9.0. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update the site options arbitrarily. Additional Analyst Note
ed attackers, with subscriber-level permissions or above to update the site options arbitrarily. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6ed215da-10c5-469b-bab2-923808feebd4?source=cve - https://www.tychesoftwares.com/docs/docs/booking-appointment-plugin-for-woocommerce-new/changelog/
CVE ID: CVE-2024-10730 State: PUBLISHED Published: 2024-11-03T08:31:04.530Z Last Updated: 2024-11-05T14:50:55.422Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Tongda OA up to 11.6. This issue affects some unknown processing of the file /pda/appcenter/web_show.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282899 - https://vuldb.com/?ctiid.282899 - http
lyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282899 - https://vuldb.com/?ctiid.282899 - https://vuldb.com/?submit.433530 - https://github.com/LvZCh/td/issues/15
CVE ID: CVE-2024-10731 State: PUBLISHED Published: 2024-11-03T10:00:06.884Z Last Updated: 2024-11-05T14:50:01.087Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/appcenter/check_seal.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282900 - https://vuldb.com/?ctiid.282900 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282900 - https://vuldb.com/?ctiid.282900 - https://vuldb.com/?submit.433531 - https://github.com/LvZCh/td/issues/16
CVE ID: CVE-2024-10732 State: PUBLISHED Published: 2024-11-03T11:00:06.122Z Last Updated: 2024-11-05T14:48:56.254Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /module/word_model/view/index.php. The manipulation of the argument query_str leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282901 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282901 - https://vuldb.com/?ctiid.282901 - https://vuldb.com/?submit.433532 - https://github.com/LvZCh/td/issues/17
CVE ID: CVE-2024-10733 State: PUBLISHED Published: 2024-11-03T12:00:06.874Z Last Updated: 2024-11-05T14:47:24.864Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Restaurant Order System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282902 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282902 - https://vuldb.com/?ctiid.282902 - https://vuldb.com/?submit.435235 - https://github.com/415Curry/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2024-10734 State: PUBLISHED Published: 2024-11-03T13:00:08.355Z Last Updated: 2024-11-04T19:19:17.343Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Project Worlds Products: Life Insurance Management System Problem Types: CWE-89 Description: A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument recipt_no leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282903 - https://vuldb.com/?ctiid.282903 - https://vuldb.com/?submit.435410 - https://github.com/peteryang520/Cve-report/blob/main/SQLi-1.md