Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33305 State: PUBLISHED Published: 2024-05-02T00:00:00.000Z Last Updated: 2025-03-26T13:44:39.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Middle Name" parameter in Create User. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33305.md
CVE ID: CVE-2024-33306 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33306.md
CVE ID: CVE-2024-33307 State: PUBLISHED Published: 2024-05-01T00:00:00.000Z Last Updated: 2025-03-27T21:06:22.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" parameter in Create User. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33307.md
CVE ID: CVE-2024-33308 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-15T15:33:46.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aaravavi/TVS-Connect-Application-VAPT/tree/main - https://github.com/aaravavi/TVS-Connect-Application-VAPT - https://github.com/msn-official/CVE-Evidence
CVE ID: CVE-2024-33309 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-06T19:38:08.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aaravavi/TVS-Connect-Application-VAPT/tree/main - https://github.com/aaravavi/TVS-Connect-Application-VAPT - https://github.com/msn-official/CVE-Evidence
CVE ID: CVE-2024-33326 State: PUBLISHED Published: 2024-06-26T00:00:00 Last Updated: 2024-08-02T02:27:53.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component XsltResultControllerHtml.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the lumPageID parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/rodnt/51ae2897abfff1bdcedccf72edbf3d24 - http://seclists.org/fulldisclosure/2024/Jul/10
CVE ID: CVE-2024-33327 State: PUBLISHED Published: 2024-06-26T00:00:00 Last Updated: 2024-08-02T02:27:53.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component UrlAccessibilityEvaluation.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contentHtml parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/rodnt/c53d4c95bb6966f0a2cf381ae5089c79 - http://seclists.org/fulldisclosure/2024/Jul/9
CVE ID: CVE-2024-33328 State: PUBLISHED Published: 2024-06-26T00:00:00.000Z Last Updated: 2025-03-25T15:34:53.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component main.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the pageId parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/rodnt/cf2946b0f6136cd03ee4737aa72ae95b - http://seclists.org/fulldisclosure/2024/Jul/8
CVE ID: CVE-2024-33329 State: PUBLISHED Published: 2024-06-26T00:00:00.000Z Last Updated: 2025-03-13T16:12:38.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/rodnt/f6b3a2ac875b8f13656063eefbfd9812 - http://seclists.org/fulldisclosure/2024/Jul/7
CVE ID: CVE-2024-33331 State: REJECTED Published: N/A Last Updated: 2024-04-28T22:46:44.347519 Description: No description available.
CVE ID: CVE-2024-33332 State: PUBLISHED Published: 2024-04-30T00:00:00.000Z Last Updated: 2025-03-27T16:52:07.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wy876/cve/issues/3
CVE ID: CVE-2024-33335 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-02T02:27:53.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.h3c.com/cn/ - https://gist.github.com/vrhappy/08cb4c8721eed8a74fe786ecdff1ec1e - https://www.h3c.com/cn/Service/Online_Help/psirt/
CVE ID: CVE-2024-33338 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-11-06T21:35:44.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Cherry-toto/jizhicms/issues/86 - https://nvd.nist.gov/vuln/detail/CVE-2023-31862 - https://github.com/7akahash1/POC/blob/main/1.md
CVE ID: CVE-2024-33339 State: REJECTED Published: N/A Last Updated: 2024-04-29T04:13:56.260992 Description: No description available.
CVE ID: CVE-2024-33342 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:27:53.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B - https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/SetPlcNetworkpwd
CVE ID: CVE-2024-33343 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:27:53.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B - https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/ChgSambaUserSettings
CVE ID: CVE-2024-33344 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:27:53.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to execute arbitrary commands via shell. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B - https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/UploadFirmware
CVE ID: CVE-2024-33345 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload_firmware.cgi, which allows remote attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-823G - https://github.com/n0wstr/IOTVuln/tree/main/DIR-823g/UploadFirmware
CVE ID: CVE-2024-33350 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:27:53.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/file.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/majic-banana/vulnerability/blob/main/POC/taocms-3.0.2%20Arbitrary%20File%20Writing%20Vulnerability.md
CVE ID: CVE-2024-33365 State: PUBLISHED Published: 2024-07-29T00:00:00 Last Updated: 2024-08-02T02:27:53.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check function in the bin/httpd component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hackmd.io/%40JohnathanHuuTri/rJNbEItJC - https://github.com/johnathanhuutri/CVE_report/blob/master/CVE-2024-33365/README.md
CVE ID: CVE-2024-33368 State: PUBLISHED Published: 2024-09-27T00:00:00 Last Updated: 2024-09-27T19:04:54.109Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary code via the build method in DonwloadPromptScreen Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/apple502j/54e0f80bfe082fd934e33970394adbb8 - https://github.com/plasmoapp/RPShare
CVE ID: CVE-2024-33369 State: PUBLISHED Published: 2024-09-27T00:00:00 Last Updated: 2024-09-27T19:03:29.308Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary code via the getFileNameFromConnection method in DownloadTask Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/apple502j/54e0f80bfe082fd934e33970394adbb8 - https://github.com/plasmoapp/RPShare
CVE ID: CVE-2024-33371 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:27:53.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_list_action.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/zchuanwen/cve/issues/I9HQRY
CVE ID: CVE-2024-33373 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-11-18T21:33:58.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords for authentication. This vulnerability can allow attackers to access the router via a brute-force attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W
nk-bl-w1210m-router/ - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Password-Policy-Bypass--%7C--Inconsistent-Password-Policy-%28CVE%E2%80%902024%E2%80%9033373%29
CVE ID: CVE-2024-33374 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-08-02T02:27:53.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Incorrect-Access-Control-%28CVE%E2%80%902024%E2%80%9033374%29
CVE ID: CVE-2024-33375 State: PUBLISHED Published: 2024-06-14T00:00:00.000Z Last Updated: 2025-03-13T13:39:50.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Credentials-Stored-in-Cleartext--%7C--Unencrypted-Credentials-%28CVE%E2%80%902024%E2%80%9033375%29
CVE ID: CVE-2024-33377 State: PUBLISHED Published: 2024-06-14T00:00:00 Last Updated: 2024-09-06T16:36:16.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Route
m-router/ - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Clickjacking-%28CVE%E2%80%902024%E2%80%9033377%29
CVE ID: CVE-2024-33382 State: PUBLISHED Published: 2024-05-08T00:00:00.000Z Last Updated: 2025-03-26T14:47:38.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/open5gs/open5gs/issues/2733
CVE ID: CVE-2024-33383 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T02:27:53.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://juvl1ne.github.io/2024/04/18/novel-plus-vulnerability/
CVE ID: CVE-2024-33386 State: REJECTED Published: N/A Last Updated: 2025-02-13T15:52:35.736Z Description: No description available.
CVE ID: CVE-2024-33393 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T02:27:53.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in spidernet-io spiderpool v.0.9.3 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/fdb09caea44c80a5681ca1d30bcd6777
CVE ID: CVE-2024-33394 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T02:27:53.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/1b75e23ece7ad98490aec1c887bdf49b
CVE ID: CVE-2024-33396 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T02:27:53.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/HouqiyuA/2b56a893c06553013982836abb77ba50
CVE ID: CVE-2024-33398 State: PUBLISHED Published: 2024-05-03T00:00:00 Last Updated: 2024-08-02T02:27:53.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/HouqiyuA/k8s-rbac-poc - https://github.com/piraeusdatastore/piraeus-operator - https://piraeus.io/ - https://gist.github.com/HouqiyuA/d0c11f
c - https://github.com/piraeusdatastore/piraeus-operator - https://piraeus.io/ - https://gist.github.com/HouqiyuA/d0c11fae5ba4789946ae33175d0f9edb
CVE ID: CVE-2024-33401 State: PUBLISHED Published: 2024-04-29T00:00:00.000Z Last Updated: 2025-03-25T18:50:51.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/zchuanwen/cve123/issues/I9I18D
CVE ID: CVE-2024-33402 State: PUBLISHED Published: 2024-05-28T17:57:41.315Z Last Updated: 2025-02-13T15:52:36.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%204.pdf
CVE ID: CVE-2024-33403 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-11-13T17:23:56.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_events.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the event_id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%202.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Mana
Management%20System%20-%20vuln%202.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2010.pdf
CVE ID: CVE-2024-33404 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/add_student_first_payment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%203.pdf
CVE ID: CVE-2024-33405 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in add_friends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friend_index parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%204.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Manageme
gement%20System%20-%20vuln%204.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%207.pdf
CVE ID: CVE-2024-33406 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /model/delete_student_grade_subject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%205.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20
d%20School%20Management%20System%20-%20vuln%205.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%207.pdf
CVE ID: CVE-2024-33407 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /model/delete_record.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%206.pdf
CVE ID: CVE-2024-33408 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:27:53.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /model/get_classroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%207.pdf - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Managem