Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-6413 State: PUBLISHED Published: 2023-11-30T13:11:58.127Z Last Updated: 2024-08-02T08:28:21.765Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Voovi Social Networking Script Products: Voovi Social Networking Script Problem Types: CWE-89 Description: A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photos.php in the id and user parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Contain
o the server and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-voovi-social-networking-script
CVE ID: CVE-2023-6414 State: PUBLISHED Published: 2023-11-30T13:12:19.434Z Last Updated: 2024-08-02T08:28:21.788Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Voovi Social Networking Script Products: Voovi Social Networking Script Problem Types: CWE-89 Description: A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via perfil.php in the id and user parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Contain
CVE ID: CVE-2023-6415 State: PUBLISHED Published: 2023-11-30T13:12:43.337Z Last Updated: 2024-10-01T14:49:16.032Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Voovi Social Networking Script Products: Voovi Social Networking Script Problem Types: CWE-89 Description: A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signin.php in the user parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Container: - CI
CVE ID: CVE-2023-6416 State: PUBLISHED Published: 2023-11-30T13:13:33.939Z Last Updated: 2024-08-02T08:28:21.814Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Voovi Social Networking Script Products: Voovi Social Networking Script Problem Types: CWE-89 Description: A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signup2.php in the emailadd parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Container:
he server and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-voovi-social-networking-script
CVE ID: CVE-2023-6417 State: PUBLISHED Published: 2023-11-30T13:13:57.356Z Last Updated: 2024-11-21T19:34:43.514Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Voovi Social Networking Script Products: Voovi Social Networking Script Problem Types: CWE-89 Description: A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via update.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Container: - CISA
er and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-voovi-social-networking-script
CVE ID: CVE-2023-6418 State: PUBLISHED Published: 2023-11-30T13:14:19.950Z Last Updated: 2024-08-02T08:28:21.816Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Voovi Social Networking Script Products: Voovi Social Networking Script Problem Types: CWE-89 Description: A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Container: Refere
er and retrieve all the information stored in the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-voovi-social-networking-script
CVE ID: CVE-2023-6419 State: PUBLISHED Published: 2023-11-30T13:17:24.799Z Last Updated: 2024-08-02T08:28:21.824Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Voovi Social Networking Script Products: Voovi Social Networking Script Problem Types: CWE-79 Description: A vulnerability has been reported in Voovi Social Networking Script version 1.0 that allows a XSS via editprofile.php in multiple parameters, the exploitation of which could allow a remote attacker to send a specially crafted JavaScript payload and partially take over the browser session of an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://www.incib
ser session of an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-voovi-social-networking-script
CVE ID: CVE-2023-6420 State: PUBLISHED Published: 2023-11-30T13:17:47.330Z Last Updated: 2025-06-03T13:53:14.504Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Voovi Social Networking Script Products: Voovi Social Networking Script Problem Types: CWE-79 Description: A vulnerability has been reported in Voovi Social Networking Script version 1.0 that allows a XSS via signup2.php in the emailadd parameter, the exploitation of which could allow a remote attacker to send a specially crafted JavaScript payload and partially take over the browser session of an authenticated user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
er session of an authenticated user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-voovi-social-networking-script
CVE ID: CVE-2023-6421 State: PUBLISHED Published: 2024-01-01T14:18:53.519Z Last Updated: 2025-06-18T14:57:52.974Z Vendors: Unknown Products: Download Manager Problem Types: CWE-863 Incorrect Authorization Description: The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/244c7c00-fc8d-4a73-bbe0-7865c621d410
CVE ID: CVE-2023-6422 State: PUBLISHED Published: 2023-11-30T13:48:15.442Z Last Updated: 2024-08-02T08:28:21.807Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Clinic Management System Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/patients_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Not
to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6423 State: PUBLISHED Published: 2023-11-30T13:49:00.583Z Last Updated: 2024-08-02T08:28:21.903Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Clinic Management System Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/events_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes
o store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6424 State: PUBLISHED Published: 2023-11-30T13:49:20.255Z Last Updated: 2024-08-02T08:28:21.840Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Clinic Management System Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/disease_symptoms_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Ana
ing user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6425 State: PUBLISHED Published: 2023-11-30T13:49:37.332Z Last Updated: 2024-08-02T08:28:21.769Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Clinic Management System Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/medical_records_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Anal
ng user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6426 State: PUBLISHED Published: 2023-11-30T13:50:17.135Z Last Updated: 2024-08-02T08:28:21.793Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Invoicing System Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /invoicing/app/invoices_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE
dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6427 State: PUBLISHED Published: 2023-11-30T13:52:56.136Z Last Updated: 2024-08-02T08:28:21.986Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Invoicing System Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /invoicing/app/invoices_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE
CVE ID: CVE-2023-6428 State: PUBLISHED Published: 2023-11-30T13:53:42.237Z Last Updated: 2025-06-03T13:50:56.399Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Invoicing System Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /invoicing/app/items_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Pr
ngerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6429 State: PUBLISHED Published: 2023-11-30T13:54:03.417Z Last Updated: 2024-08-02T08:28:21.833Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Invoicing System Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /invoicing/app/clients_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE
CVE ID: CVE-2023-6430 State: PUBLISHED Published: 2023-11-30T13:54:35.878Z Last Updated: 2024-08-02T08:28:21.859Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Inventory Manager Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/transactions_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CV
e dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6431 State: PUBLISHED Published: 2023-11-30T13:54:52.029Z Last Updated: 2024-10-01T14:48:28.877Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Inventory Manager Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/categories_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE
dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6432 State: PUBLISHED Published: 2023-11-30T13:55:08.870Z Last Updated: 2025-05-22T13:34:37.714Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Inventory Manager Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/items_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Progr
rous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6433 State: PUBLISHED Published: 2023-11-30T13:55:24.467Z Last Updated: 2024-11-21T19:36:23.455Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Inventory Manager Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/suppliers_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE P
angerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6434 State: PUBLISHED Published: 2023-11-30T13:55:47.489Z Last Updated: 2024-08-02T08:28:21.797Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Inventory Manager Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/sections_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Pr
ngerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6435 State: PUBLISHED Published: 2023-11-30T13:56:09.994Z Last Updated: 2024-08-02T08:28:21.831Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: BigProf Products: Online Inventory Manager Problem Types: CWE-79 Description: A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/batches_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Pro
gerous JavaScript payloads on the system that will be triggered when the page loads. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-xss-vulnerabilities-bigprof-products
CVE ID: CVE-2023-6436 State: PUBLISHED Published: 2024-01-02T12:15:12.010Z Last Updated: 2025-09-12T08:23:53.268Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ekol Informatics Products: Website Template Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ekol Informatics Website Template allows SQL Injection.This issue affects Website Template: through 20231215. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-0001
CVE ID: CVE-2023-6437 State: PUBLISHED Published: 2024-03-28T13:13:09.097Z Last Updated: 2024-08-02T08:28:21.796Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TP-Link Products: TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u allows authenticated OS Command Injection.This issue affects TP-Link EX20v AX1800, Tp
-Link VX220-G2u, TP-Link VN020-G2u allows authenticated OS Command Injection.This issue affects TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3 : through 20240328. Also the vulnerability continues in the TP-Link VX220-G2u and TP-Link VN020-G2u models due to the products not being produced and supported. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-24-0244
CVE ID: CVE-2023-6438 State: PUBLISHED Published: 2023-11-30T17:00:08.337Z Last Updated: 2024-08-02T08:28:21.833Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Thecosy Products: IceCMS Problem Types: CWE-837 Description: A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246438 is the identifier assigned to this vulnerability. Additional Analyst N
sclosed to the public and may be used. VDB-246438 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.246438 - https://vuldb.com/?ctiid.246438 - http://124.71.147.32:8082
CVE ID: CVE-2023-6439 State: PUBLISHED Published: 2023-11-30T19:31:04.133Z Last Updated: 2024-08-02T08:28:21.794Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: ZenTao PMS Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in ZenTao PMS 18.8. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246439. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.246439 - https://vuldb.com/?ctiid.2464
ional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.246439 - https://vuldb.com/?ctiid.246439 - https://1drv.ms/w/s!AgMfVZkPO1NWgR2_sUsSJF67lvbG?e=SStrt5