Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20592 State: PUBLISHED Published: 2018-12-30T18:00:00 Last Updated: 2024-08-05T12:05:17.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted xml file, as demonstrated by mxmldoc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/uaf_mxml-node.c:128_1.txt.err - https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/uaf_mxml-node.c:128_2.txt.err - https://github.com/michaelrsweet/mx
ub.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/uaf_mxml-node.c:128_2.txt.err - https://github.com/michaelrsweet/mxml/issues/237 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNWF6BAU7S42O4LE4B74KIMHFE2HDNMI/
CVE ID: CVE-2018-20593 State: PUBLISHED Published: 2018-12-30T18:00:00 Last Updated: 2024-08-05T12:05:17.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scan_file function in mxmldoc.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/so_mxmldoc.c:2987_1.txt.err - https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/so_mxmldoc.c:2971_1.txt.err - https://github.com/michaelrsweet/mxml/issues/237 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNWF6BAU7S42O4LE4B74KIMHFE2HDNMI/
CVE ID: CVE-2018-20594 State: PUBLISHED Published: 2018-12-30T18:00:00 Last Updated: 2024-08-05T12:05:17.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hs-web/hsweb-framework/commit/b72a2275ed21240296c6539bae1049c56abb542f - https://github.com/hs-web/hsweb-framework/issues/107
CVE ID: CVE-2018-20595 State: PUBLISHED Published: 2018-12-30T18:00:00 Last Updated: 2024-08-05T12:05:17.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hs-web/hsweb-framework/commit/40929e9b0d336a26281a5ed2e0e721d54dd8d2f2 - https://github.com/hs-web/hsweb-framework/issues/107
CVE ID: CVE-2018-20596 State: PUBLISHED Published: 2018-12-30T18:00:00 Last Updated: 2024-08-05T12:05:17.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jspxcms v9.0.0 allows SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/jspxcms/Jspxcms/issues/IQAHK
CVE ID: CVE-2018-20597 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T19:20:50.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss1
CVE ID: CVE-2018-20598 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T16:13:39.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCMS 1.4.7 has ?do=user_addpost CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#csrf
CVE ID: CVE-2018-20599 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T23:51:11.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#getshell
CVE ID: CVE-2018-20600 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T16:39:09.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss2
CVE ID: CVE-2018-20601 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T16:43:49.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss3
CVE ID: CVE-2018-20602 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T22:55:42.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#information_disclosure
CVE ID: CVE-2018-20603 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-17T00:10:49.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#csrf
CVE ID: CVE-2018-20604 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T22:20:19.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/*web*..*..*..*..*1.txt.html URI to read the 1.txt file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#directory-traversal
CVE ID: CVE-2018-20605 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T22:44:52.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#getshell
CVE ID: CVE-2018-20606 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-17T03:13:41.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure4
CVE ID: CVE-2018-20607 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-17T00:11:48.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure2
CVE ID: CVE-2018-20608 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T17:09:07.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure
CVE ID: CVE-2018-20609 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-17T01:16:43.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure2
CVE ID: CVE-2018-20610 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T16:28:19.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#directory-traversal
CVE ID: CVE-2018-20611 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T20:21:56.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#xss
CVE ID: CVE-2018-20612 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T23:00:30.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/UWA.md
CVE ID: CVE-2018-20613 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-17T00:46:35.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: TEMMOKU T1.09 Beta allows admin/user/add CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/temmoku.md
CVE ID: CVE-2018-20614 State: PUBLISHED Published: 2018-12-30T21:00:00Z Last Updated: 2024-09-16T23:21:44.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/cim.md#reload-application
CVE ID: CVE-2018-20615 State: PUBLISHED Published: 2019-03-18T16:11:36 Last Updated: 2024-08-05T12:05:17.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106645 - https://access.redhat.com/errata/RHSA-2019:0275 - http://lists.opensuse.org/ope
ttp://www.securityfocus.com/bid/106645 - https://access.redhat.com/errata/RHSA-2019:0275 - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00018.html - https://usn.ubuntu.com/3858-1/ - https://www.mail-archive.com/haproxy%40formilux.org/msg32304.html - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2018-20616 State: PUBLISHED Published: 2018-12-31T13:00:00 Last Updated: 2024-08-05T12:05:17.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wav.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/4
CVE ID: CVE-2018-20617 State: PUBLISHED Published: 2018-12-31T14:00:00Z Last Updated: 2024-09-16T19:11:07.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/5
CVE ID: CVE-2018-20618 State: PUBLISHED Published: 2018-12-31T15:00:00.000Z Last Updated: 2025-05-06T16:58:30.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/brackeen/ok-file-formats/issues/6
CVE ID: CVE-2018-20621 State: PUBLISHED Published: 2019-03-13T06:00:00 Last Updated: 2024-08-05T12:05:17.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-20621
CVE ID: CVE-2018-20622 State: PUBLISHED Published: 2018-12-31T19:00:00.000Z Last Updated: 2025-05-06T16:23:14.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html - http://www.securityfocus.com/bid/106373 - https://github.com/mdadams/jasper/issues/193 - https://www.oracle.com/security-alerts/cpuapr2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-secur
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
CVE ID: CVE-2018-20623 State: PUBLISHED Published: 2018-12-31T19:00:00.000Z Last Updated: 2025-05-06T18:03:56.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106370 - https://sourceware.org/bugzilla/show_bug.cgi?id=24049 - https://support.f5.com/csp/article/K38336243 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-an
p://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-20626 State: PUBLISHED Published: 2019-03-20T15:55:54 Last Updated: 2024-08-05T12:05:17.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20626-vikas-chaudhary/
CVE ID: CVE-2018-20627 State: PUBLISHED Published: 2019-03-20T16:25:53 Last Updated: 2024-08-05T12:05:17.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20627-vikas-chaudhary/
CVE ID: CVE-2018-20628 State: PUBLISHED Published: 2019-03-20T16:31:33 Last Updated: 2024-08-05T12:05:17.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20628-vikas-chaudhary/
CVE ID: CVE-2018-20629 State: PUBLISHED Published: 2019-03-20T16:35:05 Last Updated: 2024-08-05T12:05:17.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20629-vikas-chaudhary/
CVE ID: CVE-2018-20630 State: PUBLISHED Published: 2019-03-20T16:38:02 Last Updated: 2024-08-05T12:05:17.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20630-vikas-chaudhary/
CVE ID: CVE-2018-20631 State: PUBLISHED Published: 2019-03-20T18:11:01 Last Updated: 2024-08-05T12:05:17.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20631-vikas-chaudhary/
CVE ID: CVE-2018-20632 State: PUBLISHED Published: 2019-03-20T18:15:18 Last Updated: 2024-08-05T12:05:17.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20632-vikas-chaudhary/
CVE ID: CVE-2018-20633 State: PUBLISHED Published: 2019-03-20T18:20:51 Last Updated: 2024-08-05T12:05:17.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20633-vikas-chaudhary/
CVE ID: CVE-2018-20634 State: PUBLISHED Published: 2019-03-20T18:35:55 Last Updated: 2024-08-05T12:05:17.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20634-vikas-chaudhary/
CVE ID: CVE-2018-20635 State: PUBLISHED Published: 2019-03-20T18:40:15 Last Updated: 2024-08-05T12:05:17.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20635-vikas-chaudhary/
CVE ID: CVE-2018-20636 State: PUBLISHED Published: 2019-03-20T18:43:18 Last Updated: 2024-08-05T12:05:17.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20636-vikas-chaudhary/
CVE ID: CVE-2018-20637 State: PUBLISHED Published: 2019-03-20T18:46:28 Last Updated: 2024-08-05T12:05:17.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last Name field. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20637-vikas-chaudhary/
CVE ID: CVE-2018-20638 State: PUBLISHED Published: 2019-03-20T18:49:14 Last Updated: 2024-08-05T12:05:17.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20638-vikas-chaudhary/
CVE ID: CVE-2018-20639 State: PUBLISHED Published: 2019-03-20T18:54:54 Last Updated: 2024-08-05T12:05:17.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20639-vikas-chaudhary/
CVE ID: CVE-2018-20640 State: PUBLISHED Published: 2019-03-20T18:58:02 Last Updated: 2024-08-05T12:05:17.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20640-vikas-chaudhary/
CVE ID: CVE-2018-20641 State: PUBLISHED Published: 2019-03-20T19:00:45 Last Updated: 2024-08-05T12:05:17.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20641-vikas-chaudhary/
CVE ID: CVE-2018-20642 State: PUBLISHED Published: 2019-03-20T19:03:25 Last Updated: 2024-08-05T12:05:17.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript code in the KeySkills field. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20642-vikas-chaudhary/
CVE ID: CVE-2018-20643 State: PUBLISHED Published: 2019-03-20T19:07:12 Last Updated: 2024-08-05T12:05:17.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20643-vikas-chaudhary/
CVE ID: CVE-2018-20644 State: PUBLISHED Published: 2019-03-20T19:09:36 Last Updated: 2024-08-05T12:05:17.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20644-vikas-chaudhary/
CVE ID: CVE-2018-20645 State: PUBLISHED Published: 2019-03-20T19:12:45 Last Updated: 2024-08-05T12:05:17.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20645-vikas-chaudhary/
CVE ID: CVE-2018-20646 State: PUBLISHED Published: 2019-03-20T19:21:07 Last Updated: 2024-08-05T12:05:17.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-20646-vikas-chaudhary/