Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0472 State: PUBLISHED Published: 2024-01-12T21:31:03.824Z Last Updated: 2024-10-24T15:24:20.532Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: code-projects Products: Dormitory Management System Problem Types: CWE-200 Description: A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-250577 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Co
nd may be used. The identifier VDB-250577 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250577 - https://vuldb.com/?ctiid.250577 - https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20Database%20information%20leakage%20modifyuser.php.pdf
CVE ID: CVE-2024-0473 State: PUBLISHED Published: 2024-01-12T21:31:04.836Z Last Updated: 2025-06-03T14:03:45.436Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Dormitory Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an unknown function of the file comment.php. The manipulation of the argument com leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250578 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Contain
ay be used. VDB-250578 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250578 - https://vuldb.com/?ctiid.250578 - https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20SQL%20injection%20vulnerabilities%20comment.php.pdf
CVE ID: CVE-2024-0474 State: PUBLISHED Published: 2024-01-12T22:31:03.524Z Last Updated: 2025-06-17T21:09:19.012Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Dormitory Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250579. Additional Analyst Notes: - C
the public and may be used. The associated identifier of this vulnerability is VDB-250579. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250579 - https://vuldb.com/?ctiid.250579 - https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20SQL%20injection%20vulnerabilities%20login.php.pdf
CVE ID: CVE-2024-0475 State: PUBLISHED Published: 2024-01-13T00:00:07.227Z Last Updated: 2025-06-17T21:09:21.250Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Dormitory Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Affected by this issue is some unknown functionality of the file modifyuser.php. The manipulation of the argument user_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250580. Additional Analyst Notes:
n disclosed to the public and may be used. The identifier of this vulnerability is VDB-250580. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250580 - https://vuldb.com/?ctiid.250580 - https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20SQL%20injection%20vulnerabilities%20modifyuser.php.pdf
CVE ID: CVE-2024-0476 State: PUBLISHED Published: 2024-01-13T05:31:03.112Z Last Updated: 2025-06-03T14:02:53.171Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: Blood Bank & Donor Management Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Blood Bank & Donor Management 1.0. This affects an unknown part of the file request-received-bydonar.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250581 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: -
sed. The identifier VDB-250581 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250581 - https://vuldb.com/?ctiid.250581 - https://drive.google.com/file/d/1Hvv_oKuEplp4DTcOf9xImgyPt58a8jGz/view?usp=sharing
CVE ID: CVE-2024-0477 State: PUBLISHED Published: 2024-01-13T06:00:05.816Z Last Updated: 2025-05-14T18:39:41.213Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-89 Description: A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/action/update-deworm.php. The manipulation of the argument usage_deworm leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-250582 is the identifier assigned to this vulnerability. Addi
loit has been disclosed to the public and may be used. VDB-250582 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250582 - https://vuldb.com/?ctiid.250582 - https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL5.pdf
CVE ID: CVE-2024-0478 State: PUBLISHED Published: 2024-01-13T06:31:03.213Z Last Updated: 2025-06-16T19:42:33.261Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/edit_chicken.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250583. Additional Analy
disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250583. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250583 - https://vuldb.com/?ctiid.250583 - https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL8.pdf
CVE ID: CVE-2024-0479 State: PUBLISHED Published: 2024-01-13T07:00:05.824Z Last Updated: 2025-06-17T21:09:21.391Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: Taokeyun Problem Types: CWE-89 Description: A vulnerability was found in Taokeyun up to 1.0.5. It has been classified as critical. Affected is the function login of the file application/index/controller/m/User.php of the component HTTP POST Request Handler. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250584. Additional Analyst Notes: -
disclosed to the public and may be used. The identifier of this vulnerability is VDB-250584. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250584 - https://vuldb.com/?ctiid.250584 - https://note.zhaoj.in/share/Np0ZdyKEnVOV
CVE ID: CVE-2024-0480 State: PUBLISHED Published: 2024-01-13T07:31:03.602Z Last Updated: 2025-11-04T18:22:26.670Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: Taokeyun Problem Types: CWE-89 Description: A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is the function index of the file application/index/controller/m/Drs.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250585 was assigned to this vulnerability. Additional A
been disclosed to the public and may be used. The identifier VDB-250585 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250585 - https://vuldb.com/?ctiid.250585 - https://note.zhaoj.in/share/0KtyJccrP3Ba
CVE ID: CVE-2024-0481 State: PUBLISHED Published: 2024-01-13T09:00:05.038Z Last Updated: 2024-09-03T19:50:30.321Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Taokeyun Problem Types: CWE-89 Description: A vulnerability was found in Taokeyun up to 1.0.5. It has been rated as critical. Affected by this issue is the function shopGoods of the file application/index/controller/app/store/Goods.php of the component HTTP POST Request Handler. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250586 is the identifier assigned to this vulnerability. Additi
it has been disclosed to the public and may be used. VDB-250586 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250586 - https://vuldb.com/?ctiid.250586 - https://note.zhaoj.in/share/TKWDqowIoLqs
CVE ID: CVE-2024-0482 State: PUBLISHED Published: 2024-01-13T09:31:03.938Z Last Updated: 2025-06-03T14:02:43.121Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Taokeyun Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the file application/index/controller/app/Video.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250587. Additional Analyst Note
ed to the public and may be used. The associated identifier of this vulnerability is VDB-250587. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250587 - https://vuldb.com/?ctiid.250587 - https://note.zhaoj.in/share/MuWxURhTIYTP
CVE ID: CVE-2024-0483 State: PUBLISHED Published: 2024-01-13T10:00:05.260Z Last Updated: 2025-06-03T14:02:37.482Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Taokeyun Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Taokeyun up to 1.0.5. This vulnerability affects the function index of the file application/index/controller/app/Task.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250588. Additional Analyst Notes: - CVE Prog
to the public and may be used. The identifier of this vulnerability is VDB-250588. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250588 - https://vuldb.com/?ctiid.250588 - https://note.zhaoj.in/share/dm5VSyxmQIdl
CVE ID: CVE-2024-0484 State: PUBLISHED Published: 2024-01-13T10:31:04.066Z Last Updated: 2025-05-14T14:54:45.111Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0. This issue affects some unknown processing of the file admin/action/update_mother.php. The manipulation of the argument age_mother leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250589 was assigned to this vulnerabil
The exploit has been disclosed to the public and may be used. The identifier VDB-250589 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250589 - https://vuldb.com/?ctiid.250589 - https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL6.pdf
CVE ID: CVE-2024-0485 State: PUBLISHED Published: 2024-01-13T11:00:04.280Z Last Updated: 2025-06-17T14:11:53.565Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/add_con.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250590 is the identifier assigned to this vulnerability. Additional A
been disclosed to the public and may be used. VDB-250590 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250590 - https://vuldb.com/?ctiid.250590 - https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL7.pdf
CVE ID: CVE-2024-0486 State: PUBLISHED Published: 2024-01-13T12:00:05.803Z Last Updated: 2025-06-17T21:09:21.524Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-89 Description: A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/add_con.php. The manipulation of the argument chicken leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250
The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250591. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250591 - https://vuldb.com/?ctiid.250591 - https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL1.pdf
CVE ID: CVE-2024-0487 State: PUBLISHED Published: 2024-01-13T12:31:04.043Z Last Updated: 2024-11-14T14:26:15.892Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the argument ref leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250592. Additional Ana
oit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250592. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250592 - https://vuldb.com/?ctiid.250592 - https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL2.pdf
CVE ID: CVE-2024-0488 State: PUBLISHED Published: 2024-01-13T13:00:05.359Z Last Updated: 2024-08-27T20:43:22.012Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/action/new-feed.php. The manipulation of the argument type_feed leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250593 was assigned to this vulnerability. Addition
has been disclosed to the public and may be used. The identifier VDB-250593 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250593 - https://vuldb.com/?ctiid.250593 - https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL4.pdf
CVE ID: CVE-2024-0489 State: PUBLISHED Published: 2024-01-13T13:31:03.348Z Last Updated: 2025-06-17T21:09:21.654Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fighting Cock Information System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/action/edit_chicken.php. The manipulation of the argument ref leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-250594 is the identifier assigned to this vulnerability. Additional A
been disclosed to the public and may be used. VDB-250594 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250594 - https://vuldb.com/?ctiid.250594 - https://github.com/yingqian1984/FirePunch/blob/main/Fighting%20Cock%20Information%20System/FIGHTING_COCK_INFORMATION_SYSTEM_SQL3.pdf
CVE ID: CVE-2024-0490 State: PUBLISHED Published: 2024-01-13T14:00:05.729Z Last Updated: 2025-06-03T14:02:31.431Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Huaxia Products: ERP Problem Types: CWE-200 Description: A vulnerability was found in Huaxia ERP up to 3.1. It has been rated as problematic. This issue affects some unknown processing of the file /user/getAllList. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of t
n 3.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-250595. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250595 - https://vuldb.com/?ctiid.250595 - https://github.com/laoquanshi/puppy/blob/main/Logic%20loopholes%20in%20Huaxia%20ERP%20can%20lead%20to%20unauthorized%20access.md
CVE ID: CVE-2024-0491 State: PUBLISHED Published: 2024-01-13T14:31:04.104Z Last Updated: 2024-10-24T15:02:46.452Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Huaxia Products: ERP Problem Types: CWE-640 Description: A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1. Affected is an unknown function of the file src/main/java/com/jsh/erp/controller/UserController.java. The manipulation leads to weak password recovery. It is possible to launch the attack remotely. Upgrading to version 3.2 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-250596. Additi
s issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-250596. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250596 - https://vuldb.com/?ctiid.250596 - https://github.com/laoquanshi/puppy/blob/main/Logic%20loopholes%20in%20Huaxia%20ERP%20can%20lead%20to%20unauthorized%20access2.md
CVE ID: CVE-2024-0492 State: PUBLISHED Published: 2024-01-13T15:00:06.351Z Last Updated: 2024-08-15T15:45:49.014Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Billing Software Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Kashipara Billing Software 1.0. Affected by this vulnerability is an unknown functionality of the file buyer_detail_submit.php of the component HTTP POST Request Handler. The manipulation of the argument gstn_no leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250597 was assigned to this vulnerability. Addi
oit has been disclosed to the public and may be used. The identifier VDB-250597 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250597 - https://vuldb.com/?ctiid.250597 - https://github.com/laoquanshi/BILLING-SOFTWARE-SQL-injection-vulnerability/blob/main/BILLING%20SOFTWARE%20sql.docx
CVE ID: CVE-2024-0493 State: PUBLISHED Published: 2024-01-13T15:31:03.467Z Last Updated: 2024-08-01T18:04:49.879Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Billing Software Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Kashipara Billing Software 1.0. Affected by this issue is some unknown functionality of the file submit_delivery_list.php of the component HTTP POST Request Handler. The manipulation of the argument customer_details leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250598 is the identifier assigned to this
ed remotely. The exploit has been disclosed to the public and may be used. VDB-250598 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.250598 - https://vuldb.com/?ctiid.250598 - https://github.com/laoquanshi/BILLING-SOFTWARE-SQL-injection-vulnerability/blob/main/BILLING%20SOFTWARE%20SQL%20injection%20vulnerability(5).docx
CVE ID: CVE-2024-0494 State: PUBLISHED Published: 2024-01-13T16:00:05.140Z Last Updated: 2024-08-01T18:04:49.798Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Billing Software Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file material_bill.php of the component HTTP POST Request Handler. The manipulation of the argument itemtypeid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250599. Additional An