Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-24002 State: PUBLISHED Published: 2024-02-06T00:00:00 Last Updated: 2024-08-26T19:18:48.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection mechanism in `safeSqlParse` method for sql injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jishenghua/jshERP/issues/99 - https://github.com/cxcxcxcxcxcxcxc/
ISA ADP Vulnrichment: References: - https://github.com/jishenghua/jshERP/issues/99 - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24002.txt
CVE ID: CVE-2024-24003 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-08T18:44:56.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutMaterialCount() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection mechanism in `safeSqlParse` method for sql injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jishenghua/jshERP/issues/99 - https://github.com/cxcx
ntainer: - CISA ADP Vulnrichment: References: - https://github.com/jishenghua/jshERP/issues/99 - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24003.txt
CVE ID: CVE-2024-24004 State: PUBLISHED Published: 2024-02-06T00:00:00 Last Updated: 2024-08-19T20:15:58.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutDetail() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection mechanism in `safeSqlParse` method for sql injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jishenghua/jshERP/issues/99 - https://github.com/cxcxcxcxcxcxcxc/
ISA ADP Vulnrichment: References: - https://github.com/jishenghua/jshERP/issues/99 - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24004.txt
CVE ID: CVE-2024-24013 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-06-12T14:42:13.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /novel/pay/list Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24013.txt
CVE ID: CVE-2024-24014 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-05T18:32:07.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /novel/author/list Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24014.txt
CVE ID: CVE-2024-24015 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-06-20T20:14:17.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL via /sys/user/exit Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24015.txt
CVE ID: CVE-2024-24017 State: PUBLISHED Published: 2024-02-08T00:00:00 Last Updated: 2024-08-01T23:19:51.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /common/dict/list Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24017.txt
CVE ID: CVE-2024-24018 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:42:26.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /system/dataPerm/list Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24018.txt
CVE ID: CVE-2024-24019 State: PUBLISHED Published: 2024-02-07T00:00:00.000Z Last Updated: 2025-06-05T18:22:32.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /system/roleDataPerm/list Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24019.txt
CVE ID: CVE-2024-24021 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-09T16:16:50.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/userFeedback/list. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24021.txt
CVE ID: CVE-2024-24023 State: PUBLISHED Published: 2024-02-08T00:00:00 Last Updated: 2024-08-26T19:16:25.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/bookContent/list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24023.txt
CVE ID: CVE-2024-24024 State: PUBLISHED Published: 2024-02-08T00:00:00 Last Updated: 2024-08-19T20:06:10.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary File download vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: fileDownload(). An attacker can pass in specially crafted filePath and fieName parameters to perform arbitrary File download. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24024.txt
CVE ID: CVE-2024-24025 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-12T14:56:55.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: upload(). An attacker can pass in specially crafted filename parameter to perform arbitrary File download. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24025.txt
CVE ID: CVE-2024-24026 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-04-24T15:57:58.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com.java2nb.system.controller.SysUserController: uploadImg(). An attacker can pass in specially crafted filename parameter to perform arbitrary File download. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/201206030/novel-plus - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24026.txt
CVE ID: CVE-2024-24027 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-08-13T20:24:12.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://samyueru.substack.com/p/cve-2024-24027-sql-injection-trong-likeshop
CVE ID: CVE-2024-24028 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-11-07T21:30:41.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://thanhlo.substack.com/p/khai-thac-lo-hong-cve-2024-24028
CVE ID: CVE-2024-24029 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-12T14:54:08.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/heyewei/JFinalcms/issues/I8VE52
CVE ID: CVE-2024-24034 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-16T18:17:40.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Setor Informatica S.I.L version 3.0 is vulnerable to Open Redirect via the hprinter parameter, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ELIZEUOPAIN/CVE-2024-24034/tree/main
CVE ID: CVE-2024-24035 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-15T20:22:56.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Setor Informatica SIL 3.1 allows attackers to run arbitrary code via the hmessage parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ELIZEUOPAIN/CVE-2024-24035/tree/main
CVE ID: CVE-2024-24041 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-05-29T15:02:42.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the location parameter at /travel-journal/write-journal.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/cross-site-scripting - https://github.com/tubakvgc/CVE/blob/main/Travel_Journal_App.md
CVE ID: CVE-2024-24042 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-27T20:25:46.252Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/apple502j/193358682885fe1a6708309ce934e4ed - https://github.com/Devan-Kerman/ARRP/commit/7ea80db462c8bf66a0565e84fa49c1f2ecb9287b
CVE ID: CVE-2024-24043 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-28T15:21:59.019Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AC:L/AV:L/A:N/C:N/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Speedy11CZ MCRPX v.1.4.0 and before allows a local attacker to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/apple502j/193358682885fe1a6708309ce934e4ed - https://github.com/Speedy11CZ/mcrpx/commit/02ca6d1fd851567560046766ac9d04d20db35b8e - https://github.com/Speedy11CZ/mcrpx/releases/tag/v1.4.1
CVE ID: CVE-2024-24050 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-11-04T15:03:58.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.muratcagrialis.com/workout-journal-app-stored-xss-cve-2024-24050
CVE ID: CVE-2024-24051 State: PUBLISHED Published: 2024-06-12T00:00:00.000Z Last Updated: 2025-03-25T16:30:45.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input validation of printing files in Monoprice Select Mini V2 V37.115.32 allows attackers to instruct the device's movable parts to destinations that exceed the devices' maximum coordinates via the printing of a malicious .gcode file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tkruppert/Reported_Vulnerabilities/blob/main/CVE-2024-24051.md
CVE ID: CVE-2024-24059 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-05-15T16:01:21.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#2-file-upload-vulnerability
CVE ID: CVE-2024-24060 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-06-12T14:43:09.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#11-stored-cross-site-scripting-sysuser
CVE ID: CVE-2024-24061 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-05-29T15:02:49.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#13-stored-cross-site-scripting-syscontentadd
CVE ID: CVE-2024-24062 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-06-12T14:57:42.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#12-stored-cross-site-scripting-sysrole
CVE ID: CVE-2024-24091 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-04-24T15:56:51.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.yealink.com/en/trust-center/security-advisories/2f2b990211c440cf
CVE ID: CVE-2024-24092 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-08-05T14:05:25.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2024-24092/blob/main/CVE-9
CVE ID: CVE-2024-24093 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-10-31T19:14:59.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-24093/blob/main/CVE-10
CVE ID: CVE-2024-24095 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-11-05T17:15:41.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-24095/blob/main/CVE-21
CVE ID: CVE-2024-24096 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-11-05T19:29:44.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-24096/blob/main/CVE-20
CVE ID: CVE-2024-24097 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-11-07T16:28:23.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-24097/blob/main/CVE-12
CVE ID: CVE-2024-24098 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-08-08T20:40:59.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://code-projects.org/scholars-tracking-system-in-php-with-source-code/ - https://github.com/ASR511-OO7/CVE-2024-24098/blob/main/CVE-13
CVE ID: CVE-2024-24099 State: PUBLISHED Published: 2024-02-27T00:00:00 Last Updated: 2024-11-06T23:15:26.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-24099/blob/main/CVE-19
CVE ID: CVE-2024-24100 State: PUBLISHED Published: 2024-02-27T00:00:00.000Z Last Updated: 2025-03-25T16:06:25.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-24100/blob/main/CVE-18
CVE ID: CVE-2024-24101 State: PUBLISHED Published: 2024-03-12T00:00:00.000Z Last Updated: 2025-03-13T16:35:26.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-24101/blob/main/CVE-14
CVE ID: CVE-2024-24105 State: PUBLISHED Published: 2024-03-13T00:00:00.000Z Last Updated: 2025-03-27T19:44:58.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2024-24105/blob/main/CVE-40
CVE ID: CVE-2024-24110 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-05T13:12:53.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/crmeb/crmeb_java/issues/13
CVE ID: CVE-2024-24112 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-05-08T19:09:05.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Exrick/xmall/issues/78
CVE ID: CVE-2024-24113 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:42:19.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: xxl-job =< 2.4.1 has a Server-Side Request Forgery (SSRF) vulnerability, which causes low-privileged users to control executor to RCE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuxueli/xxl-job/issues/3375
CVE ID: CVE-2024-24115 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-17T13:31:46.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Edit Page function of Cotonti CMS v0.9.24 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mechaneus.github.io/CVE-2024-24115.html
CVE ID: CVE-2024-24116 State: PUBLISHED Published: 2024-10-02T00:00:00.000Z Last Updated: 2025-02-10T22:50:17.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zty-1995/RG-NBS2009G-P-switch/tree/main/Unauthorized%20Access%20Vulnerability - https://gist.github.com/zty-1995/7a5e3ad0eb3b6c44db1a6eb4092893d3