Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0449 State: PUBLISHED Published: 2024-03-13T15:26:45.801Z Last Updated: 2024-08-01T18:04:49.773Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: artibot Products: ArtiBot Free Chat Bot for WordPress WebSites Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permis
ut sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/450d0748-93d6-448a-97a2-06fc2f8065b3?source=cve - https://plugins.trac.wordpress.org/browser/artibot/trunk/artibot.php#L52
CVE ID: CVE-2024-0450 State: PUBLISHED Published: 2024-03-19T15:12:07.789Z Last Updated: 2025-11-03T21:50:58.107Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Python Software Foundation Products: CPython Problem Types: CWE-405 Description: An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive. Additional Analyst Notes: - CVE Program C
s the zipfile module reject zip archives which overlap entries in the archive. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/python/cpython/commit/66363b9a7b9fe7c99eba3a185b74c5fdbf842eba - https://github.com/python/cpython/commit/fa181fcf2156f703347b03a3b1966ce47be8ab3b - https://github.com/python/cpython/commit/a956e510f6336d5ae111ba429a61c3ade30a7549 - https://github.com/python/cpython/commit/30fe5d853b56138dbec62432d370a1f99409fc85 - https://github.com/python/cpython/commit/a2c59992e9e8d35baba9695eb186ad6c6ff85c51 - https://github.com/python/cpython/commit/d05bac0b74153beb541b88b4fca33bf053990183 - https://github.com/python/c
f85c51 - https://github.com/python/cpython/commit/d05bac0b74153beb541b88b4fca33bf053990183 - https://github.com/python/cpython/issues/109858 - https://www.bamsoftware.com/hacks/zipbomb/ - https://mail.python.org/archives/list/security-announce@python.org/thread/XELNUX2L3IOHBTFU7RQHCY6OUVEWZ2FG/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00024.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00025.html - http://www.openwall.com/lists/oss-security/2024/03/20/5 - https://github.com/python/cpython/commit/70497218351ba44bffc8b571201ecb5652d84675 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T3IGRX54M7RNCQOXVQO5KQKTGWC
tps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T3IGRX54M7RNCQOXVQO5KQKTGWCOABIM/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5VHWS52HGD743C47UMCSAK2A773M2YE/
CVE ID: CVE-2024-0451 State: PUBLISHED Published: 2024-05-22T03:17:48.588Z Last Updated: 2024-08-01T18:04:49.911Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: quantumcloud Products: AI ChatBot for WordPress – WPBot Problem Types: CWE-284 Improper Access Control Description: The AI ChatBot plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the openai_file_list_callback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to list files existing in a linked OpenAI account. Additional Analyst Notes: - CISA ADP Vulnrich
level access and above, to list files existing in a linked OpenAI account. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1c0572a5-6cc9-43ab-a4a3-c8d3b93c8fcf?source=cve - https://plugins.trac.wordpress.org/browser/chatbot/trunk/includes/openai/qcld-bot-openai.php#L175 - https://plugins.trac.wordpress.org/changeset/3089461/chatbot/trunk/includes/openai/qcld-bot-openai.php
CVE ID: CVE-2024-0452 State: PUBLISHED Published: 2024-05-22T03:17:49.191Z Last Updated: 2024-08-01T18:04:49.767Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: quantumcloud Products: AI ChatBot for WordPress – WPBot Problem Types: CWE-284 Improper Access Control Description: The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_upload_callback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files to a linked OpenAI account. Additional Analyst Notes: - CISA ADP Vulnric
scriber-level access and above, to upload files to a linked OpenAI account. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/34b6475c-b5dd-42a1-98d1-9b5ae9ff4ad5?source=cve - https://plugins.trac.wordpress.org/browser/chatbot/trunk/includes/openai/qcld-bot-openai.php#L208 - https://plugins.trac.wordpress.org/changeset/3089461/chatbot/trunk/includes/openai/qcld-bot-openai.php
CVE ID: CVE-2024-0453 State: PUBLISHED Published: 2024-05-22T03:17:49.652Z Last Updated: 2024-08-01T18:04:49.790Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: quantumcloud Products: AI ChatBot for WordPress – WPBot Problem Types: CWE-284 Improper Access Control Description: The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_delete_callback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete files from a linked OpenAI account. Additional Analyst Notes: - CISA ADP Vulnr
scriber-level access and above, to delete files from a linked OpenAI account. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7e0ef4a5-42d7-4cea-b19f-51917e3ee55f?source=cve - https://plugins.trac.wordpress.org/browser/chatbot/trunk/includes/openai/qcld-bot-openai.php#L133 - https://plugins.trac.wordpress.org/changeset/3089461/chatbot/trunk/includes/openai/qcld-bot-openai.php
CVE ID: CVE-2024-0454 State: PUBLISHED Published: 2024-01-12T01:48:47.887Z Last Updated: 2024-11-06T17:10:10.844Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: ELAN Products: DELL Inspiron Problem Types: CWE-290 Description: ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
d suffer this risk on DELL Inspiron platform. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.emc.com.tw/emc/tw/vulnerability-disclosure-policy
CVE ID: CVE-2024-0455 State: PUBLISHED Published: 2024-02-25T08:10:17.100Z Last Updated: 2024-08-12T13:40:34.185Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-918 Description: The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single user) could put in the URL ``` http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance ``` which is a special IP and URL that resolves only when the request comes from within an EC2 instance. This would allow the user to see the co
P and URL that resolves only when the request comes from within an EC2 instance. This would allow the user to see the connection/secret credentials for their specific instance and be able to manage it regardless of who deployed it. The user would have to have pre-existing knowledge of the hosting infra which the target instance is deployed on, but if sent - would resolve if on EC2 and the proper `iptable` or firewall rule is not configured for their setup. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/07d83b49-7ebb-40d2-83fc-78381e3c5c9c - https://github.com/mintplex-labs/anything-llm/commit/b2b2c2afe15c48952d57b4d01e7108
d83b49-7ebb-40d2-83fc-78381e3c5c9c - https://github.com/mintplex-labs/anything-llm/commit/b2b2c2afe15c48952d57b4d01e7108f9515c5f55
CVE ID: CVE-2024-0456 State: PUBLISHED Published: 2024-01-26T01:02:43.953Z Last Updated: 2025-05-29T15:17:26.228Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-425 Description: An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ - https://gitlab.com/gitlab-o
s://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/430726
CVE ID: CVE-2024-0459 State: PUBLISHED Published: 2024-01-12T15:31:03.855Z Last Updated: 2025-06-17T21:09:18.625Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: Blood Bank & Donor Management Problem Types: CWE-89 Description: A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affects unknown code of the file /admin/request-received-bydonar.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250564. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
The identifier of this vulnerability is VDB-250564. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250564 - https://vuldb.com/?ctiid.250564 - https://drive.google.com/file/d/1nSgSw1cTXZWeYTjt4rliMIDHyQcGK-8z/view?usp=sharing
CVE ID: CVE-2024-0460 State: PUBLISHED Published: 2024-01-12T15:31:04.964Z Last Updated: 2025-06-03T14:04:48.239Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Faculty Management System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250565 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container
be used. The identifier VDB-250565 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250565 - https://vuldb.com/?ctiid.250565 - https://github.com/BxYQ/vul/blob/main/2Faculty%20Management%20System-SQL.pdf
CVE ID: CVE-2024-0461 State: PUBLISHED Published: 2024-01-12T17:00:05.876Z Last Updated: 2025-06-17T21:09:18.757Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Faculty Clearance Problem Types: CWE-89 Description: A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deactivate.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250566 is the identifier assigned to this vulnerabilit
The exploit has been disclosed to the public and may be used. VDB-250566 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250566 - https://vuldb.com/?ctiid.250566 - https://github.com/BxYQ/vul/blob/main/3ONLINE_FACULTY_CLEARANCE_SYSTEM%20has%20SQL1.pdf
CVE ID: CVE-2024-0462 State: PUBLISHED Published: 2024-01-12T17:31:03.807Z Last Updated: 2024-08-01T18:04:49.845Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Faculty Clearance Problem Types: CWE-89 Description: A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designee_view_status.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated ident
The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250567. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.250567 - https://vuldb.com/?ctiid.250567 - https://github.com/BxYQ/vul/blob/main/3ONLINE_FACULTY_CLEARANCE_SYSTEM%20has%20SQL2.pdf
CVE ID: CVE-2024-0463 State: PUBLISHED Published: 2024-01-12T18:00:05.435Z Last Updated: 2025-05-14T15:37:16.994Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Faculty Clearance Problem Types: CWE-89 Description: A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/admin_view_info.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabili
y be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250568. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250568 - https://vuldb.com/?ctiid.250568 - https://github.com/BxYQ/vul/blob/main/3ONLINE_FACULTY_CLEARANCE_SYSTEM%20has%20SQL3.pdf
CVE ID: CVE-2024-0464 State: PUBLISHED Published: 2024-01-12T18:31:03.783Z Last Updated: 2025-06-03T14:04:38.582Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Faculty Clearance Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file delete_faculty.php of the component HTTP GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250569 was assigned to this vulnerability. Addit
it has been disclosed to the public and may be used. The identifier VDB-250569 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250569 - https://vuldb.com/?ctiid.250569 - https://github.com/BxYQ/vul/blob/main/3ONLINE_FACULTY_CLEARANCE_SYSTEM%20has%20SQL4.pdf
CVE ID: CVE-2024-0465 State: PUBLISHED Published: 2024-01-12T19:00:04.987Z Last Updated: 2025-06-16T18:35:08.234Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: code-projects Products: Employee Profile Management System Problem Types: CWE-24 Description: A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-250570 is the identifier assigned to this vulnerability. Additional Analyst Notes: - C
o the public and may be used. VDB-250570 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250570 - https://vuldb.com/?ctiid.250570 - https://github.com/BxYQ/vul/blob/main/EMPLOYEE_PROFILE_MANAGEMENT_SYSTEM%20_FileRead.pdf
CVE ID: CVE-2024-0466 State: PUBLISHED Published: 2024-01-12T19:00:06.068Z Last Updated: 2024-10-24T15:30:46.799Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Employee Profile Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file file_table.php. The manipulation of the argument per_id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250571. Additional Analyst Notes: -
o the public and may be used. The associated identifier of this vulnerability is VDB-250571. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250571 - https://vuldb.com/?ctiid.250571 - https://github.com/BxYQ/vul/blob/main/EMPLOYEE_PROFILE_MANAGEMENT_SYSTEM%20_SQL1.pdf
CVE ID: CVE-2024-0467 State: PUBLISHED Published: 2024-01-12T20:00:05.844Z Last Updated: 2025-06-17T21:09:18.882Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Employee Profile Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_position_query.php. The manipulation of the argument pos_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250572. Additional
exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250572. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250572 - https://vuldb.com/?ctiid.250572 - https://github.com/BxYQ/vul/blob/main/EMPLOYEE_PROFILE_MANAGEMENT_SYSTEM_Xss.pdf
CVE ID: CVE-2024-0468 State: PUBLISHED Published: 2024-01-12T20:31:03.457Z Last Updated: 2024-08-27T20:44:56.474Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-434 Description: A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/new-father.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250573 was assigned to this vul
motely. The exploit has been disclosed to the public and may be used. The identifier VDB-250573 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250573 - https://vuldb.com/?ctiid.250573 - https://github.com/BxYQ/vul/blob/main/FIGHTING_COCK_INFORMATION_SYSTEM_File9docx.pdf
CVE ID: CVE-2024-0469 State: PUBLISHED Published: 2024-01-12T20:31:04.490Z Last Updated: 2024-10-03T19:09:02.883Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Human Resource Integrated System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update_personal_info.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250574 is the identifier assigned to this vulnerability. Additional An
been disclosed to the public and may be used. VDB-250574 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250574 - https://vuldb.com/?ctiid.250574 - https://github.com/yingqian1984/FirePunch/blob/main/11-Human%20Resource%20Integrated%20System%20has%20SQL%20injection%20vulnerabilities%20update_personal_info.php.pdf
CVE ID: CVE-2024-0470 State: PUBLISHED Published: 2024-01-12T21:00:06.455Z Last Updated: 2025-06-03T14:03:51.296Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Human Resource Integrated System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /admin_route/inc_service_credits.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250575. Addi
it has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250575. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250575 - https://vuldb.com/?ctiid.250575 - https://github.com/yingqian1984/FirePunch/blob/main/11-Human%20Resource%20Integrated%20System%20has%20SQL%20injection%20vulnerabilities%20inc_service_credits.php.pdf
CVE ID: CVE-2024-0471 State: PUBLISHED Published: 2024-01-12T21:00:07.539Z Last Updated: 2025-06-13T19:04:32.878Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Human Resource Integrated System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin_route/dec_service_credits.php. The manipulation of the argument date leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250576. Additional Ana
oit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250576. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250576 - https://vuldb.com/?ctiid.250576 - https://github.com/yingqian1984/FirePunch/blob/main/11-Human%20Resource%20Integrated%20System%20has%20SQL%20injection%20vulnerabilities%20dec_service_credits.php.pdf