Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7642 State: PUBLISHED Published: 2024-08-09T15:00:08.251Z Last Updated: 2024-08-09T15:26:10.678Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Kortex Lite Advocate Office Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file activate_act.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
hed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274063 - https://vuldb.com/?ctiid.274063 - https://vuldb.com/?submit.387276 - https://github.com/samwbs/kortexcve/blob/main/sqli_activate_act/sqli_activate_act.md
CVE ID: CVE-2024-7643 State: PUBLISHED Published: 2024-08-09T15:00:09.903Z Last Updated: 2024-08-12T17:46:24.110Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Leads Manager Tool Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/delete-leads.php of the component Delete Leads Handler. The manipulation of the argument leads leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274064 - https://vuldb.com/?ctiid.274064 - https://vuldb.com/?submit.387344 - https://github.com/joinia/webray.com.cn/blob/main/Leads-Manager-Tool/leadmanagersql.md
CVE ID: CVE-2024-7644 State: PUBLISHED Published: 2024-08-09T15:31:03.622Z Last Updated: 2024-09-09T15:05:21.187Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Leads Manager Tool Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leads_name/phone_number leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnr
ttack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274065 - https://vuldb.com/?ctiid.274065 - https://vuldb.com/?submit.387345 - https://github.com/joinia/webray.com.cn/blob/main/Leads-Manager-Tool/leadmanagerxss.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-7645 State: PUBLISHED Published: 2024-08-09T16:00:09.547Z Last Updated: 2024-08-09T16:42:11.975Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-352 Description: A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file users.php of the component User Page. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274066 - https://vuldb.com/?ctiid.274066 - https://vuldb.com/?submit.387399 - https://github.com/ddChenA/cve/blob/main/csrf.md
CVE ID: CVE-2024-7646 State: PUBLISHED Published: 2024-08-16T17:36:53.783Z Last Updated: 2024-08-19T18:28:09.677Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: ingress-nginx Problem Types: CWE-20 Description: A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
t credential has access to all secrets in the cluster. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kubernetes/kubernetes/issues/126744 - https://groups.google.com/g/kubernetes-security-announce/c/a1__cKjWkfA - https://github.com/kubernetes/ingress-nginx/pull/11719 - https://github.com/kubernetes/ingress-nginx/pull/11721
CVE ID: CVE-2024-7647 State: PUBLISHED Published: 2024-08-21T05:30:22.639Z Last Updated: 2024-08-21T16:33:28.294Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: otasync Products: OTA Sync Booking Engine Widget Problem Types: CWE-352 Description: The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.7. This is due to missing or incorrect nonce validation on the otasync_widget_settings_fnc() function. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious scripts via a forged request granted they can trick a site administr
o update the plugin's settings and inject malicious scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9af6d311-a72e-4c86-8ecb-70fa83e5a240?source=cve - https://plugins.trac.wordpress.org/browser/ota-sync-booking-engine-widget/trunk/otasync-widget.php#L72
CVE ID: CVE-2024-7648 State: PUBLISHED Published: 2024-08-10T03:23:26.394Z Last Updated: 2024-08-12T14:31:45.025Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: wpopal Products: Opal Membership Problem Types: CWE-862 Description: The Opal Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.4 via the private notes functionality on payments which utilizes WordPress comments. This makes it possible for authenticated attackers, with subscriber-level access and above, to view private notes via recent comments that should be restricted to just administrators. Additional Analyst Notes: - CISA AD
private notes via recent comments that should be restricted to just administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d3098565-d037-4a31-af3c-00e8b93b922e?source=cve - https://plugins.trac.wordpress.org/browser/opal-membership/trunk/inc/class-opalmembership-ajax.php#L128 - https://plugins.trac.wordpress.org/browser/opal-membership/trunk/inc/mixes-functions.php#L154
CVE ID: CVE-2024-7649 State: PUBLISHED Published: 2024-08-10T03:23:27.028Z Last Updated: 2024-08-10T14:16:47.139Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: wpopal Products: Opal Membership Problem Types: CWE-79 Description: The Opal Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via checkout form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
ll execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ed2bb3e2-5002-4746-a4f8-b5d1752ccbbf?source=cve - https://plugins.trac.wordpress.org/browser/opal-membership/trunk/inc/class-opalmembership-checkout.php
CVE ID: CVE-2024-7650 State: PUBLISHED Published: 2025-07-10T10:02:58.567Z Last Updated: 2025-07-10T14:14:17.034Z Vendors: OpenText™ Products: Directory Services Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0844620
CVE ID: CVE-2024-7651 State: PUBLISHED Published: 2024-08-21T05:30:23.826Z Last Updated: 2024-08-21T13:15:52.962Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: appcheap Products: App Builder – Create Native Android & iOS Apps On The Flight Problem Types: CWE-89 Description: The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to app
nd lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b43371a6-bcb5-4418-b5a5-85879775010c?source=cve - https://plugins.trac.wordpress.org/browser/app-builder/trunk/includes/pure.php#L18
CVE ID: CVE-2024-7652 State: PUBLISHED Published: 2024-09-06T18:18:28.692Z Last Updated: 2025-10-30T16:14:30.001Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1901411 - https://github.com/tc39/ecma262/security/advisories/GHSA-g38c-wh3c-5h9r - https://www.mozilla.org/security/
id=1901411 - https://github.com/tc39/ecma262/security/advisories/GHSA-g38c-wh3c-5h9r - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-30/ - https://www.mozilla.org/security/advisories/mfsa2024-31/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-7654 State: PUBLISHED Published: 2024-09-03T14:48:00.539Z Last Updated: 2024-09-03T15:09:51.475Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Progress Products: OpenEdge Problem Types: CWE-79 Description: An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-discovery feature was activated. Unauthorized access to the discovery service's UDP port allowed content injection into parts of the OEM web interface making it possible for other types of attack that could spoof or deceive web interface users. Unauthorized use of the OEE/OEM discovery service was remediated by deactivating
spoof or deceive web interface users. Unauthorized use of the OEE/OEM discovery service was remediated by deactivating the discovery service by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.progress.com/s/article/Unauthenticated-Content-Injection-in-OpenEdge-Management-web-interface-via-ActiveMQ-discovery-service
CVE ID: CVE-2024-7655 State: PUBLISHED Published: 2024-09-10T07:30:03.793Z Last Updated: 2024-09-10T13:29:21.462Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: peepso Products: Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App Problem Types: CWE-79 Description: The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arb
and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e85ee611-ae81-4736-b4f0-b9d06714da18?source=cve - https://wordpress.org/plugins/peepso-core/#developers - https://www.peepso.com/6-4-6-0/ - https://www.peepso.com/changelog/ - https://plugins.trac.wordpress.org/browser/peepso-core/tags/6.4.6.0/classes/adminconfigfie
//www.peepso.com/changelog/ - https://plugins.trac.wordpress.org/browser/peepso-core/tags/6.4.6.0/classes/adminconfigfields.php?rev=3147528#L17 - https://plugins.trac.wordpress.org/changeset/3147528/
CVE ID: CVE-2024-7656 State: PUBLISHED Published: 2024-08-24T11:36:25.051Z Last Updated: 2024-08-26T15:35:17.368Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: levantoan Products: Image Hotspot by DevVN Problem Types: CWE-94 Description: The Image Hotspot by DevVN plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.5 via deserialization of untrusted input in the 'devvn_ihotspot_shortcode_func' function. This makes it possible for authenticated attackers, with Author-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additio
inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/624bdb9e-6c50-4a00-9a04-1a32c938d48b?source=cve - https://plugins.trac.wordpress.org/browser/devvn-image-hotspot/trunk/admin/inc/add_shortcode_devvn_ihotspot.php#L16 - https://plugins.trac.wordpress.org/changeset/3139899/
CVE ID: CVE-2024-7657 State: PUBLISHED Published: 2024-08-11T01:31:03.635Z Last Updated: 2024-08-12T14:29:33.776Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Gila Products: CMS Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/update_rows/page?id=2 of the component HTTP POST Request Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analy
may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274114 - https://vuldb.com/?ctiid.274114 - https://vuldb.com/?submit.384630
CVE ID: CVE-2024-7658 State: PUBLISHED Published: 2024-08-11T02:00:07.020Z Last Updated: 2025-01-13T21:00:19.902Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: projectsend Problem Types: CWE-99 Description: A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720 is able to address this issue. The patch is named eb5a04774927e5855b9d0e5870a2aae5a3dc5a08. It is recommended to upgrade the affected component.
issue. The patch is named eb5a04774927e5855b9d0e5870a2aae5a3dc5a08. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.274115 - https://vuldb.com/?ctiid.274115 - https://vuldb.com/?submit.385000 - https://github.com/projectsend/projectsend/commit/eb5a04774927e5855b9d0e5870a2aae5a3dc5a08 - https://github.com/projectsend/projectsend/releases/tag/r1720
CVE ID: CVE-2024-7659 State: PUBLISHED Published: 2024-08-11T02:31:04.263Z Last Updated: 2024-08-13T17:15:00.214Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: projectsend Problem Types: CWE-330 Description: A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string of the file includes/functions.php of the component Password Reset Token Handler. The manipulation leads to insufficiently random values. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version r1720 is abl
he complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version r1720 is able to address this issue. The name of the patch is aa27eb97edc2ff2b203f97e6675d7b5ba0a22a17. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274116 - https://vuldb.com/?ctiid.274116 - https://vuldb.com/?submit.385004 - https://github.com/projectsend/projectsend/commit/aa27eb97edc2ff2b203f97e6675d7b5ba0a22a17 - https://github.com/projectsend/projectsend/releases/tag/r1720
CVE ID: CVE-2024-7660 State: PUBLISHED Published: 2024-08-11T03:00:08.395Z Last Updated: 2024-08-12T16:31:32.731Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: File Manager App Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274117 - https://vuldb.com/?ctiid.274117 - https://vuldb.com/?submit.388434 - https://docs.google.com/document/d/19jCrr48SwP9dkOAaf8HAgg0fxK7PjE4ZWbPSFU4zqKE/edit?usp=sharing
CVE ID: CVE-2024-7661 State: PUBLISHED Published: 2024-08-11T03:31:04.539Z Last Updated: 2024-08-12T12:44:24.957Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Car Driving School Management System Problem Types: CWE-352 Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects the function save_users of the file admin/user/index.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274119 - https://vuldb.com/?ctiid.274119 - https://vuldb.com/?submit.388765 - https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20CSRF-1.md
CVE ID: CVE-2024-7662 State: PUBLISHED Published: 2024-08-11T04:00:07.449Z Last Updated: 2024-08-12T14:11:45.929Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Car Driving School Management System Problem Types: CWE-352 Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerability affects the function save_package of the file admin/packages/manag_package.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274120 - https://vuldb.com/?ctiid.274120 - https://vuldb.com/?submit.388766 - https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20CSRF-2.md
CVE ID: CVE-2024-7663 State: PUBLISHED Published: 2024-08-11T05:00:05.609Z Last Updated: 2024-08-12T14:40:51.700Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Car Driving School Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274121 - https://vuldb.com/?ctiid.274121 - https://vuldb.com/?submit.388767 - https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-1.md
CVE ID: CVE-2024-7664 State: PUBLISHED Published: 2024-08-11T06:31:03.945Z Last Updated: 2024-08-13T17:20:06.922Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Car Driving School Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown function of the file view_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.274122 - https://vuldb.com/?ctiid.274122 - https://vuldb.com/?submit.388768 - https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20SQL%20Injection-2.md