Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6876 State: PUBLISHED Published: 2024-09-10T15:08:16.212Z Last Updated: 2024-10-01T06:27:27.135Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: oscat.de, CODESYS Products: OSCAT Basic Library Problem Types: CWE-125 Description: Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18601&token=27389a52e058d95ff70b17a2370fedf07e073034&download= - https://certvde.com/en/advisories/VDE-2024
mpFile&t=f&f=18601&token=27389a52e058d95ff70b17a2370fedf07e073034&download= - https://certvde.com/en/advisories/VDE-2024-046/
CVE ID: CVE-2024-6877 State: PUBLISHED Published: 2024-09-18T14:51:32.753Z Last Updated: 2024-09-18T18:02:27.122Z Vendors: Eliz Software Products: Panel Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.This issue affects Panel: before v2.3.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1497
CVE ID: CVE-2024-6878 State: PUBLISHED Published: 2024-09-18T14:55:24.769Z Last Updated: 2024-11-21T16:58:13.715Z Vendors: Eliz Software Products: Panel Problem Types: CWE-552 Description: Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations.This issue affects Panel: before v2.3.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1497
CVE ID: CVE-2024-6879 State: PUBLISHED Published: 2024-08-26T06:00:01.427Z Last Updated: 2024-08-28T15:01:26.636Z Vendors: Unknown Products: Quiz and Survey Master (QSM) Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is embedded, which could allows contributor and above roles to perform Stored Cross-Site Scripting (XSS) attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4da0b318-03e7-409d-9b02-f108e4232c87/
CVE ID: CVE-2024-6880 State: PUBLISHED Published: 2025-01-10T17:51:32.583Z Last Updated: 2025-01-10T18:12:46.647Z Vendors: Jan Syski Products: MegaBIP Problem Types: CWE-538 Description: During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms. Publicly available source code of "/registered.php" discloses that path, allowing an attacker to attempt further attacks. This issue affects MegaBIP software versions below 5.15 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/09/CVE-2024-6680 - https://megabip.pl/ - https://
: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/09/CVE-2024-6680 - https://megabip.pl/ - https://www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznej
CVE ID: CVE-2024-6881 State: PUBLISHED Published: 2024-07-29T12:56:51.695Z Last Updated: 2024-08-27T10:54:23.772Z Vendors: M-Files Corporation Products: Hubshare Problem Types: CWE-79 Description: Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://product.m-files.com/security-advisories/cve-2024-6881/
CVE ID: CVE-2024-6883 State: PUBLISHED Published: 2024-08-21T05:30:21.157Z Last Updated: 2024-08-21T13:17:20.489Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: sethshoultes Products: Event Espresso – Event Registration & Ticketing Sales Problem Types: CWE-862 Description: The Event Espresso 4 Decaf – Event Registration Event Ticketing plugin for WordPress is vulnerable to limited unauthorized plugin settings modification due to a missing capability check on the saveTimezoneString and some other functions in all versions up to, and including, 5.0.22.decaf. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify
ng, 5.0.22.decaf. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify some of the plugin settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/689abb68-0c19-4f89-91db-fd15ab8bca8e?source=cve - https://plugins.trac.wordpress.org/browser/event-espresso-decaf/tags/4.10.46.decaf/admin_pages/events/Events_Admin_Page.core.php#L2800
CVE ID: CVE-2024-6884 State: PUBLISHED Published: 2024-08-08T06:00:04.409Z Last Updated: 2024-08-08T18:27:36.888Z Vendors: Unknown Products: Gutenberg Blocks with AI by Kadence WP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.39 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1768de0c-e4ea-4c98-abf1-7ac805f214b8/
CVE ID: CVE-2024-6885 State: PUBLISHED Published: 2024-07-23T02:01:41.694Z Last Updated: 2024-08-01T21:45:38.220Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: ckp267 Products: MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles Problem Types: CWE-22 Description: The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maxi_remove_custom_image_size and maxi_add_custom_image_size functions in all versions up to, and including, 1.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to d
, and including, 1.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/249b08c5-7429-4690-9f08-fc3f049aa62c?source=cve - https://plugins.trac.wordpress.org/browser/maxi-blocks/tags/1.9.2/core/class-maxi-image-crop.php#L42 - https://plugins.trac.wordpress.org/browser/maxi-blocks/tags/1.9.2/core/class-maxi-image-crop.php#L100 - https://plugins.trac.wordpress.org/
c.wordpress.org/browser/maxi-blocks/tags/1.9.2/core/class-maxi-image-crop.php#L100 - https://plugins.trac.wordpress.org/browser/maxi-blocks/tags/1.9.2/plugin.php#L221
CVE ID: CVE-2024-6886 State: PUBLISHED Published: 2024-08-06T03:23:21.692Z Last Updated: 2024-08-06T14:30:41.836Z Vendors: Gitea Products: Gitea Open Source Git Server Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/go-gitea/gitea/pull/31200 - https://blog.gitea.com/release-of-1.22.1/
CVE ID: CVE-2024-6887 State: PUBLISHED Published: 2024-09-12T06:00:04.189Z Last Updated: 2024-09-12T18:30:05.435Z Vendors: Unknown Products: Giveaways and Contests by RafflePress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Giveaways and Contests by RafflePress WordPress plugin before 1.12.16 does not sanitise and escape some of its Giveaways settings, which could allow high privilege users such as editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/553806f4-da20-433c-8c19-35e
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/553806f4-da20-433c-8c19-35e6c87ccade/
CVE ID: CVE-2024-6888 State: PUBLISHED Published: 2024-09-04T06:00:03.859Z Last Updated: 2024-09-04T14:41:05.863Z Vendors: Unknown Products: Secure Copy Content Protection and Content Locking Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f4df74c2-4c95-4d1c-97c1-
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f4df74c2-4c95-4d1c-97c1-ebfc225f6b93/
CVE ID: CVE-2024-6889 State: PUBLISHED Published: 2024-09-04T06:00:04.054Z Last Updated: 2024-09-04T14:46:34.608Z Vendors: Unknown Products: Secure Copy Content Protection and Content Locking Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9651abd1-0f66-418e-85a7
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9651abd1-0f66-418e-85a7-2de0c5e91bed/
CVE ID: CVE-2024-6890 State: PUBLISHED Published: 2024-08-07T23:09:40.249Z Last Updated: 2024-08-08T13:28:52.446Z Vendors: Journyx Products: Journyx (jtime) Problem Types: CWE-321, CWE-334, CWE-799 Description: Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2024-007.txt
CVE ID: CVE-2024-6891 State: PUBLISHED Published: 2024-08-07T23:13:56.924Z Last Updated: 2024-08-08T13:41:15.752Z Vendors: Journyx Products: Journyx (jtime) Problem Types: CWE-94, CWE-95 Description: Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2024-008.txt
CVE ID: CVE-2024-6892 State: PUBLISHED Published: 2024-08-07T23:19:00.527Z Last Updated: 2024-08-09T15:29:23.033Z Vendors: Journyx Products: Journyx (jtime) Problem Types: CWE-81 Description: Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2024-009.txt
CVE ID: CVE-2024-6893 State: PUBLISHED Published: 2024-08-07T23:22:08.667Z Last Updated: 2024-08-08T13:14:39.692Z Vendors: Journyx Products: Journyx (jtime) Problem Types: CWE-611 Description: The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://korelogic.com/Resources/Advisories/KL-001-2024-010.txt
CVE ID: CVE-2024-6894 State: PUBLISHED Published: 2024-09-05T09:29:49.865Z Last Updated: 2024-09-05T18:39:53.379Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: filipe-mateus-do-nascimento Products: RD Station Problem Types: CWE-79 Description: The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.3.2 due to insufficient input sanitization and output escaping of post metaboxes added by the plugin. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Ad
cess and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aa5075a8-1da1-4738-ad4b-b6c323d772ee?source=cve - https://plugins.trac.wordpress.org/browser/integracao-rd-station/trunk/metaboxes/add_custom_scripts.php - https://wordpress.org/plugins/integracao-rd-station/#developers
CVE ID: CVE-2024-6895 State: PUBLISHED Published: 2024-07-19T14:47:50.432Z Last Updated: 2024-08-13T20:45:30.139Z Vendors: YugabyteDB Products: YugabyteDB Anywhere Problem Types: CWE-306 Description: Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compromised user session to change critical security information without re-authentication. An attacker with user session and access to application can modify settings such as password and email without being prompted for the current password, enabling account takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yugaby
ver. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yugabyte/yugabyte-db/commit/9687371d8777f876285b737a9d01995bc46bafa5
CVE ID: CVE-2024-6896 State: PUBLISHED Published: 2024-07-24T11:00:09.141Z Last Updated: 2024-08-01T21:45:38.205Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mohammed_kaludi Products: AMP for WP – Accelerated Mobile Pages Problem Types: CWE-79 Description: The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.96.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user access
s, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b0a5fdb9-4e36-43ce-88ce-cd75bb1d1e25?source=cve - https://plugins.trac.wordpress.org/browser/accelerated-mobile-pages/tags/1.0.96.1/templates/features.php#L7159 - https://wordpress.org/plugins/accelerated-mobile-pages/#developers - https://plugins.trac.wordpress.org/changeset/3123278/
CVE ID: CVE-2024-6897 State: PUBLISHED Published: 2024-07-27T11:13:39.560Z Last Updated: 2024-08-01T21:45:38.377Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: athemes Products: aThemes Starter Sites Problem Types: CWE-79 Description: The aThemes Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes:
inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c0d06c02-fad7-4d2f-a230-03723ba828b3?source=cve - https://plugins.trac.wordpress.org/browser/athemes-starter-sites/trunk/v2/classes/class-importer.php#L65 - https://wordpress.org/plugins/athemes-starter-sites/#developers - https://plugins.trac.wordpress.org/changeset/3124434/
CVE ID: CVE-2024-6898 State: PUBLISHED Published: 2024-07-19T03:31:04.103Z Last Updated: 2024-08-01T21:45:38.280Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument UserName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271923. Additional Analyst Notes: - CISA ADP Vu
and may be used. The associated identifier of this vulnerability is VDB-271923. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271923 - https://vuldb.com/?ctiid.271923 - https://vuldb.com/?submit.375190 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-01.md
CVE ID: CVE-2024-6899 State: PUBLISHED Published: 2024-07-19T05:00:05.474Z Last Updated: 2024-08-01T21:45:38.274Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file view_info.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271924. Additional Analyst Notes: - CISA ADP Vulnrichment: -
d may be used. The identifier of this vulnerability is VDB-271924. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271924 - https://vuldb.com/?ctiid.271924 - https://vuldb.com/?submit.375191 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-02.md
CVE ID: CVE-2024-6900 State: PUBLISHED Published: 2024-07-19T06:31:04.488Z Last Updated: 2024-08-01T21:45:38.289Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file edit_emp.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271925 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnric
may be used. The identifier VDB-271925 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271925 - https://vuldb.com/?ctiid.271925 - https://vuldb.com/?submit.375193 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-03.md
CVE ID: CVE-2024-6901 State: PUBLISHED Published: 2024-07-19T07:00:06.580Z Last Updated: 2024-08-01T21:45:38.365Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unknown function of the file entry.php. The manipulation of the argument school leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-271926 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment:
be used. VDB-271926 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271926 - https://vuldb.com/?ctiid.271926 - https://vuldb.com/?submit.375194 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-04.md
CVE ID: CVE-2024-6902 State: PUBLISHED Published: 2024-07-19T07:31:04.198Z Last Updated: 2024-08-01T21:45:38.376Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file sort_user.php. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271927. Additional Analyst Notes: - CISA
public and may be used. The associated identifier of this vulnerability is VDB-271927. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271927 - https://vuldb.com/?ctiid.271927 - https://vuldb.com/?submit.375195 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-05.md
CVE ID: CVE-2024-6903 State: PUBLISHED Published: 2024-07-19T08:00:05.354Z Last Updated: 2024-08-01T21:45:38.328Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Record Management System 1.0. Affected by this issue is some unknown functionality of the file sort1_user.php. The manipulation of the argument position leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271928. Additional Analyst Notes: -
isclosed to the public and may be used. The identifier of this vulnerability is VDB-271928. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271928 - https://vuldb.com/?ctiid.271928 - https://vuldb.com/?submit.375206 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-06.md
CVE ID: CVE-2024-6904 State: PUBLISHED Published: 2024-07-19T08:31:03.862Z Last Updated: 2024-08-01T21:45:38.293Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Record Management System 1.0. This affects an unknown part of the file sort2_user.php. The manipulation of the argument qualification leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271929 was assigned to this vulnerability. Additional Analyst Notes: - CIS
he public and may be used. The identifier VDB-271929 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.271929 - https://vuldb.com/?ctiid.271929 - https://vuldb.com/?submit.375208 - https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-07.md