Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0505 State: PUBLISHED Published: 2023-03-27T15:37:23.872Z Last Updated: 2025-02-19T20:13:47.868Z Vendors: Unknown Products: Ever Compare Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Ever Compare WordPress plugin through 1.2.3 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dbabff3e-b021-49ed-aaf3-b73a77d4b354
CVE ID: CVE-2023-0506 State: PUBLISHED Published: 2023-10-03T13:12:51.965Z Last Updated: 2024-09-19T20:15:43.067Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ByDemes Group Products: Airspace CCTV Web Service Problem Types: CWE-284 Description: The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/inadequate-access-
Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/inadequate-access-control-demes-group-products - https://github.com/zerolynx/wstg/blob/master/document/4-Web_Application_Security_Testing/05-Authorization_Testing/02-Testing_for_Bypassing_Authorization_Schema.md
CVE ID: CVE-2023-0507 State: PUBLISHED Published: 2023-03-01T15:35:55.259Z Last Updated: 2025-03-07T19:33:21.129Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Grafana Products: Grafana, Grafana Enterprise Problem Types: CWE-79 Description: Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. The stored XSS vulnerability was possible due to map attributions weren't properly sanitized and allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance. An attacker needs to have the Editor ro
xecuted in the context of the currently authorized user of the Grafana instance. An attacker needs to have the Editor role in order to change a panel to include a map attribution containing JavaScript. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. Users may upgrade to version 8.5.21, 9.2.13 and 9.3.8 to receive a fix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2023-0507/ - https://security.netapp.com/advisory/ntap-
ferences: - https://grafana.com/security/security-advisories/cve-2023-0507/ - https://security.netapp.com/advisory/ntap-20230413-0001/
CVE ID: CVE-2023-0508 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T16:58:22.665Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-113 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/389328 - https://hackerone.com/repo
- CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/389328 - https://hackerone.com/reports/1842314 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0508.json
CVE ID: CVE-2023-0509 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-31T16:45:30.444Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: pyload Products: pyload/pyload Problem Types: CWE-295 Description: Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/a370e0c2-a41c-4871-ad91-bc6f31a8e839 - https://github.com/pyload/pyload/commit/a9098bdf7406e6faf9df3da6ff2d584e90c13bbb
CVE ID: CVE-2023-0511 State: PUBLISHED Published: 2023-02-28T16:26:19.817Z Last Updated: 2025-04-14T17:04:00.356Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ForgeRock Products: Access Management Java Policy Agent Problem Types: CWE-23 Description: Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. This issue affects Access Management Java Policy Agent: all versions up to 5.10.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://backstage.forgerock.com/downloads/browse/am/featured/java-agents - https://backstage.forgerock.com/knowledge/kb/ar
tps://backstage.forgerock.com/downloads/browse/am/featured/java-agents - https://backstage.forgerock.com/knowledge/kb/article/a21576868
CVE ID: CVE-2023-0512 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-31T16:44:58.673Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-369 Description: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74 - https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835 - https://support.apple.com/kb/HT213677 - https://support.apple.com/kb/HT213675 - https://support.apple.com/kb/HT213670 - http://seclists.org/fulldisclosu
13677 - https://support.apple.com/kb/HT213675 - https://support.apple.com/kb/HT213670 - http://seclists.org/fulldisclosure/2023/Mar/17 - http://seclists.org/fulldisclosure/2023/Mar/18 - http://seclists.org/fulldisclosure/2023/Mar/21 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/
CVE ID: CVE-2023-0513 State: PUBLISHED Published: 2023-01-26T15:00:12.681Z Last Updated: 2024-08-02T05:17:48.969Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: isoftforce Products: Dreamer CMS Problem Types: CWE-79 Description: A vulnerability has been found in isoftforce Dreamer CMS up to 4.0.1 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.3 is able to address this issue. It is recommended to upgrade the affected component. VDB-219334 is the identifier assigned to this vulnerability
issue. It is recommended to upgrade the affected component. VDB-219334 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219334 - https://vuldb.com/?ctiid.219334 - https://gitee.com/isoftforce/dreamer_cms/issues/I68UYM - https://gitee.com/isoftforce/dreamer_cms/tree/Latest_Stable_Release_4.1.3
CVE ID: CVE-2023-0514 State: PUBLISHED Published: 2023-05-08T13:58:10.717Z Last Updated: 2025-02-04T20:12:36.773Z Vendors: Unknown Products: Membership Database Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Membership Database WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c6cc400a-9bfb-417d-9206-5582a49d0f05
CVE ID: CVE-2023-0515 State: PUBLISHED Published: 2023-01-26T16:58:49.834Z Last Updated: 2024-08-02T05:17:49.239Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerabil
ql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219335. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219335 - https://vuldb.com/?ctiid.219335 - https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_forget_password_email.md
CVE ID: CVE-2023-0516 State: PUBLISHED Published: 2023-01-26T16:58:52.057Z Last Updated: 2024-08-02T05:17:49.424Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file user/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219
injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219336. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219336 - https://vuldb.com/?ctiid.219336 - https://github.com/linmoren/online-tours-travels-management-system/blob/main/user_forget_password_email.md
CVE ID: CVE-2023-0518 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T19:13:59.735Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/383082 - https://hackerone.com/reports/1766973 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0518.json
CVE ID: CVE-2023-0519 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-31T14:28:28.435Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: modoboa Products: modoboa/modoboa Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/891ad0cb-d12f-4c5e-aac8-d7326caf2129 - https://github.com/modoboa/modoboa/commit/eef9ab72b5305578a3ad7a7463bd284aa645e98b
CVE ID: CVE-2023-0520 State: PUBLISHED Published: 2023-05-15T12:15:38.396Z Last Updated: 2025-01-24T20:55:12.178Z Vendors: Unknown Products: RapidExpCart Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vulnerability which could be used against high-privilege users such as admin, furthermore lack of csrf protection means an attacker can trick a logged in admin to perform the attack by submitting a hidden form. Additional An
rotection means an attacker can trick a logged in admin to perform the attack by submitting a hidden form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/be4f7ff9-af79-477b-9f47-e40e25a3558e
CVE ID: CVE-2023-0522 State: PUBLISHED Published: 2023-05-08T13:58:07.769Z Last Updated: 2025-02-04T19:40:04.167Z Vendors: Unknown Products: Enable/Disable Auto Login when Register Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Enable/Disable Auto Login when Register WordPress plugin through 1.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c7984bfb-86a3-4530-90ae-17ab39af1c54
CVE ID: CVE-2023-0523 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T21:09:32.085Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS was possible via a malicious email address for certain instances. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/389487
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/389487 - https://hackerone.com/reports/1842867 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0523.json
CVE ID: CVE-2023-0524 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:40:00.312Z Vendors: n/a Products: Tenable.io, Tenable.sc, Nessus Problem Types: Privilege Escalation Description: As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This could allow a malicious actor with sufficient permissions to modify environment variables and abuse an impacted plugin in order to escalate privileges. We have resolved the issue and also made several defense-in-depth fixes alongside. While the probability of successful exploitation is low, Tenable is committed to securing our customers’ environments and our prod
probability of successful exploitation is low, Tenable is committed to securing our customers’ environments and our products. The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202212212055. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2023-04
CVE ID: CVE-2023-0525 State: PUBLISHED Published: 2023-08-03T23:42:43.290Z Last Updated: 2024-10-18T20:11:17.005Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Mitsubishi Electric Corporation Products: GOT2000 Series GT27 model, GOT2000 Series GT25 model, GOT2000 Series GT23 model, GOT2000 Series GT21 model, GOT SIMPLE Series GS25 model, GOT SIMPLE Series GS21 model, GT Designer3 Version1 (GOT2000), GT SoftGOT2000 Problem Types: CWE-261 Description: Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior
T27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions 01.49.000 and prior, GS21 model versions 01.49.000 and prior, GT Designer3 Version1 (GOT2000) versions 1.295H and prior and GT SoftGOT2000 versions 1.295H and prior allows a remote unauthenticated attacker to obtain plaintext passwords by sniffing packets containing encrypted passwords and decrypting the encrypted passwords, in the case of transferring data with GT Designer3 Version1(GOT2000) and GOT2000 Series or GOT SIMPLE Series with the Data Transfer Security function enabled, or in the cas
ersion1(GOT2000) and GOT2000 Series or GOT SIMPLE Series with the Data Transfer Security function enabled, or in the case of transferring data by the SoftGOT-GOT link function with GT SoftGOT2000 and GOT2000 series with the Data Transfer Security function enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-008_en.pdf - https://jvn.jp/vu/JVNVU95285923/index.html - https://www.cisa.gov/news-events/ics-advisories/icsa-23-215-02
CVE ID: CVE-2023-0526 State: PUBLISHED Published: 2023-05-08T13:58:24.790Z Last Updated: 2025-01-29T14:57:59.876Z Vendors: Unknown Products: Post Shortcode Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Post Shortcode WordPress plugin through 2.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0ec58310-243d-40c8-9fa6-8753947bfa89
CVE ID: CVE-2023-0527 State: PUBLISHED Published: 2023-01-27T10:32:39.795Z Last Updated: 2024-08-02T05:17:49.382Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Security Guards Hiring System Problem Types: CWE-79 Description: A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. The manipulation of the argument searchdata with the input "><script>alert(document.domain)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The id
ite scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219596. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219596 - https://vuldb.com/?ctiid.219596 - https://github.com/ctflearner/Vulnerability/blob/main/Online-Security-guard-POC.md
CVE ID: CVE-2023-0528 State: PUBLISHED Published: 2023-01-27T10:42:21.387Z Last Updated: 2024-08-02T05:17:49.017Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219597 was assigned to this vulnerability. Additional
s been disclosed to the public and may be used. The identifier VDB-219597 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219597 - https://vuldb.com/?ctiid.219597 - https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_abc_id.md
CVE ID: CVE-2023-0529 State: PUBLISHED Published: 2023-01-27T10:42:24.863Z Last Updated: 2025-03-28T15:39:17.726Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/add_payment.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219598 is the identifier assigned to this vulnerability. Addi
loit has been disclosed to the public and may be used. VDB-219598 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.219598 - https://vuldb.com/?ctiid.219598 - https://github.com/linmoren/online-tours-travels-management-system/blob/main/_admin_add_payment_id.md
CVE ID: CVE-2023-0530 State: PUBLISHED Published: 2023-01-27T10:42:27.021Z Last Updated: 2024-08-02T05:17:49.433Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/approve_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219599. A
ploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219599. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219599 - https://vuldb.com/?ctiid.219599 - https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_approve_user_id.md
CVE ID: CVE-2023-0531 State: PUBLISHED Published: 2023-01-27T10:42:29.342Z Last Updated: 2024-08-02T05:17:49.448Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/booking_report.php. The manipulation of the argument to_date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219600. Additional
xploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219600. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219600 - https://vuldb.com/?ctiid.219600 - https://github.com/linmoren/online-tours-travels-management-system/blob/main/tototo_date.md
CVE ID: CVE-2023-0532 State: PUBLISHED Published: 2023-01-27T10:42:31.497Z Last Updated: 2025-03-28T15:37:27.939Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/disapprove_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219601 was assigned to this vulnera