Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
o the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95413
CVE ID: CVE-2017-20074 State: PUBLISHED Published: 2022-06-21T06:05:53.000Z Last Updated: 2025-04-15T14:17:13.745Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsletter1.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
he public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95414
CVE ID: CVE-2017-20075 State: PUBLISHED Published: 2022-06-21T06:05:55.000Z Last Updated: 2025-04-15T14:17:02.523Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
c and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95415
CVE ID: CVE-2017-20076 State: PUBLISHED Published: 2022-06-21T06:05:56.000Z Last Updated: 2025-04-15T14:16:53.850Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability affects unknown code of the file /admin/searchview.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://w
lic and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95416
CVE ID: CVE-2017-20077 State: PUBLISHED Published: 2022-06-21T06:05:58.000Z Last Updated: 2025-04-15T14:16:46.878Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. This issue affects some unknown processing of the file /admin/success_story.php. The manipulation leads to improper privilege management. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95417
CVE ID: CVE-2017-20078 State: PUBLISHED Published: 2022-06-21T06:06:00.000Z Last Updated: 2025-04-15T14:16:31.347Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/featured.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.explo
may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95418
CVE ID: CVE-2017-20079 State: PUBLISHED Published: 2022-06-21T06:06:03.000Z Last Updated: 2025-04-15T14:16:22.852Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unknown functionality of the file /admin/photo.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
ublic and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95419
CVE ID: CVE-2017-20080 State: PUBLISHED Published: 2022-06-21T06:06:05.000Z Last Updated: 2025-04-15T14:16:12.251Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. Affected by this issue is some unknown functionality of the file /admin/googleads.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
closed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95420
CVE ID: CVE-2017-20081 State: PUBLISHED Published: 2022-06-21T06:06:07.000Z Last Updated: 2025-04-15T14:16:03.094Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.
and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95421
CVE ID: CVE-2017-20082 State: PUBLISHED Published: 2022-06-22T06:10:15.000Z Last Updated: 2025-04-15T14:15:53.980Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: JUNG Products: Smart Visu Server Problem Types: CWE-912 Description: A vulnerability, which was classified as problematic, has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. This issue affects some unknown processing. The manipulation leads to backdoor. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component. Additional Analy
to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/18 - https://vuldb.com/?id.96815
CVE ID: CVE-2017-20083 State: PUBLISHED Published: 2022-06-22T06:10:16.000Z Last Updated: 2025-04-15T14:15:44.706Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: JUNG Products: Smart Visu Server Problem Types: CWE-912 Description: A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the component SSH Server. The manipulation leads to backdoor. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component. Additional
rading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/18 - https://vuldb.com/?id.96816
CVE ID: CVE-2017-20084 State: PUBLISHED Published: 2022-06-22T06:10:18.000Z Last Updated: 2025-04-15T14:15:30.202Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: JUNG Products: Smart Visu Server Problem Types: CWE-912 Description: A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to u
closed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/18 - https://vuldb.com/?id.96817
CVE ID: CVE-2017-20085 State: PUBLISHED Published: 2022-06-23T04:20:23.000Z Last Updated: 2025-04-15T14:15:11.688Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Atahualpa Theme Problem Types: CWE-80 Description: A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/83 - https://vuldb.com/?id.97375
CVE ID: CVE-2017-20086 State: PUBLISHED Published: 2022-06-23T04:20:24.000Z Last Updated: 2025-04-15T14:15:00.560Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: VaultPress Plugin Problem Types: CWE-94 Description: A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/95 - https://vuldb.com/?id.97383
CVE ID: CVE-2017-20087 State: PUBLISHED Published: 2022-06-23T04:20:26.000Z Last Updated: 2025-04-15T14:14:47.325Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Alpine PhotoTile for Instagram Plugin Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, has been found in Alpine PhotoTile for Instagram Plugin 1.2.7.7. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/94 - https://
CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/94 - https://vuldb.com/?id.97382
CVE ID: CVE-2017-20088 State: PUBLISHED Published: 2022-06-23T04:20:27.000Z Last Updated: 2025-04-15T14:14:34.974Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Atahualpa Theme Problem Types: CWE-352 Description: A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/90 - https://vuldb.com/?id.97380
CVE ID: CVE-2017-20089 State: PUBLISHED Published: 2022-06-23T04:20:29.000Z Last Updated: 2025-04-15T14:14:26.556Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Gwolle Guestbook Plugin Problem Types: CWE-80 Description: A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/bugtraq/2017/Mar/1 - https://vuldb.com/?id.97379
CVE ID: CVE-2017-20090 State: PUBLISHED Published: 2022-06-23T04:20:30.000Z Last Updated: 2025-04-15T14:14:19.205Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Global Content Blocks Plugin Problem Types: CWE-352 Description: A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/bugtraq/2017/Mar/0 - https://vuldb.com/?id.97378
CVE ID: CVE-2017-20091 State: PUBLISHED Published: 2022-06-23T04:20:32.000Z Last Updated: 2025-04-15T14:14:12.021Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: File Manager Plugin Problem Types: CWE-352 Description: A vulnerability was found in File Manager Plugin 3.0.1. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/bugtraq/2017/Feb/57 - https://vuldb.com/?id.97377
CVE ID: CVE-2017-20092 State: PUBLISHED Published: 2022-06-24T06:45:26.000Z Last Updated: 2025-04-15T14:14:03.936Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Google Analytics Dashboard Plugin Problem Types: CWE-80 Description: A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/93 - https://vuldb.com/?id.97381
CVE ID: CVE-2017-20093 State: PUBLISHED Published: 2022-06-24T06:45:28.000Z Last Updated: 2025-04-15T14:13:54.783Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Download Manager Plugin Problem Types: CWE-352 Description: A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/82 - https://vuldb.com/?id.97374
CVE ID: CVE-2017-20094 State: PUBLISHED Published: 2022-06-24T06:45:30.000Z Last Updated: 2025-04-15T14:13:44.946Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: NewStatPress Plugin Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation leads to basic cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 1.2.5 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/81 - https://vuldb.com/?id.97373
CVE ID: CVE-2017-20095 State: PUBLISHED Published: 2022-06-24T06:45:31.000Z Last Updated: 2025-04-15T14:13:35.783Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Simple Ads Manager Plugin Problem Types: CWE-94 Description: A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/80 - https://vuldb.com/?id.97372
CVE ID: CVE-2017-20096 State: PUBLISHED Published: 2022-06-24T06:45:33.000Z Last Updated: 2025-04-15T14:13:26.701Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: WP-SpamFree Anti-Spam Plugin Problem Types: CWE-80 Description: A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/79 - https://vuldb.com/?id.97371
CVE ID: CVE-2017-20097 State: PUBLISHED Published: 2022-06-24T06:45:34.000Z Last Updated: 2025-04-15T14:13:18.680Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: WP-Filebase Download Manager Plugin Problem Types: CWE-80 Description: A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/78 - https://vuldb.com/?id.9
ntainer: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/78 - https://vuldb.com/?id.97370
CVE ID: CVE-2017-20098 State: PUBLISHED Published: 2022-06-27T18:11:08.000Z Last Updated: 2025-04-15T14:12:03.287Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Admin Custom Login Plugin Problem Types: CWE-80 Description: A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/75 - https://vuldb.com/?id.97368
CVE ID: CVE-2017-20099 State: PUBLISHED Published: 2022-06-27T18:11:03.000Z Last Updated: 2025-04-15T14:12:10.791Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Analytics Stats Counter Statistics Plugin Problem Types: CWE-94 Description: A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/74 - https://vuldb.com/?id.97367
CVE ID: CVE-2017-20100 State: PUBLISHED Published: 2022-06-27T13:25:17.000Z Last Updated: 2025-04-15T14:12:43.201Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Air Transfer Problem Types: CWE-80 Description: A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vulnerability-lab.com/get_content.php
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vulnerability-lab.com/get_content.php?id=2035 - https://vuldb.com/?id.97280
CVE ID: CVE-2017-20101 State: PUBLISHED Published: 2022-06-27T13:25:21.000Z Last Updated: 2025-04-15T14:12:32.627Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: unspecified Products: ProjectSend Problem Types: CWE-200 Description: A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/58 - https://youtu.be
gram Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/58 - https://youtu.be/Xc6Jg9I7Pj4 - https://vuldb.com/?id.97275
CVE ID: CVE-2017-20102 State: PUBLISHED Published: 2022-06-27T13:25:26.000Z Last Updated: 2025-04-15T14:12:21.276Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: unspecified Products: Album Lock Problem Types: CWE-22 Description: A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vulnerability-lab.co
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vulnerability-lab.com/get_content.php?id=2033 - https://vuldb.com/?id.97268
CVE ID: CVE-2017-20103 State: PUBLISHED Published: 2022-06-27T21:50:11.000Z Last Updated: 2025-04-15T14:11:52.315Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Kama Click Counter Plugin Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument order_by/order with the input ASC%2c(select*from(select(sleep(2)))a) leads to sql injection (Blind). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to versio