Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1937 State: PUBLISHED Published: 2023-04-07T08:31:03.357Z Last Updated: 2024-08-02T06:05:26.821Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: zhenfeng13 Products: My-Blog Problem Types: CWE-352 Description: A vulnerability, which was classified as problematic, was found in zhenfeng13 My-Blog. Affected is an unknown function of the file /admin/configurations/userInfo. The manipulation of the argument yourAvatar/yourName/yourEmail leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no versi
the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-225264. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225264 - https://vuldb.com/?ctiid.225264 - https://gitee.com/zhenfeng13/My-Blog/issues/I6PV4U
CVE ID: CVE-2023-1938 State: PUBLISHED Published: 2023-05-30T07:49:14.686Z Last Updated: 2025-01-10T21:05:01.779Z Vendors: Unknown Products: WP Fastest Cache Problem Types: CWE-918 Server-Side Request Forgery (SSRF), CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/92b1c6d8-51db-46aa-bde6-abdfb091aab5
CVE ID: CVE-2023-1939 State: PUBLISHED Published: 2023-04-11T17:47:49.976Z Last Updated: 2025-02-10T18:57:15.161Z Vendors: Devolutions Products: Remote Desktop Manager Description: No access control for the OTP key on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0009
CVE ID: CVE-2023-1940 State: PUBLISHED Published: 2023-04-07T17:31:03.086Z Last Updated: 2024-08-02T06:05:27.072Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple and Beautiful Shopping Cart System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This vulnerability affects unknown code of the file delete_user_query.php. The manipulation of the argument user_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225316. Additional Analys
has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225316. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225316 - https://vuldb.com/?ctiid.225316 - https://github.com/anchnet-security/Mkshope/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20delete_user_query.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-1941 State: PUBLISHED Published: 2023-04-07T17:31:04.055Z Last Updated: 2025-02-07T20:10:02.376Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple and Beautiful Shopping Cart System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225317 was assigned to this vuln
otely. The exploit has been disclosed to the public and may be used. The identifier VDB-225317 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225317 - https://vuldb.com/?ctiid.225317 - https://github.com/anchnet-security/Mkshope/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20login.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-1942 State: PUBLISHED Published: 2023-04-07T18:00:04.607Z Last Updated: 2024-08-02T06:05:27.067Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-434 Description: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability i
emotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225319. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225319 - https://vuldb.com/?ctiid.225319 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Upload%20any%20file%20at%20the%20administrator%20profile%20upload%20location.pdf
CVE ID: CVE-2023-1943 State: PUBLISHED Published: 2023-10-11T23:01:50.876Z Last Updated: 2024-09-18T15:06:31.946Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: kops Problem Types: CWE-250 Description: Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kubernetes/kops/issues/15539 - https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU
CVE ID: CVE-2023-1944 State: PUBLISHED Published: 2023-05-24T00:00:00 Last Updated: 2025-01-16T20:37:16.816Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: minikube Problem Types: CWE-259 Description: This vulnerability enables ssh access to minikube container using a default password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kubernetes/minikube
CVE ID: CVE-2023-1945 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T16:55:58.938Z Vendors: Mozilla Products: Thunderbird, Firefox ESR Problem Types: Memory Corruption in Safe Browsing Code Description: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 102.10 and Firefox ESR < 102.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-15/ - https://www.mozilla.org/security/advisories/mfsa2023-14/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1777588
CVE ID: CVE-2023-1946 State: PUBLISHED Published: 2023-04-07T22:00:06.578Z Last Updated: 2024-08-02T06:05:27.092Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Survey Application System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown processing of the component Add New Handler. The manipulation of the argument Title with the input <script>prompt(document.domain)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225329 was a
may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225329 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225329 - https://vuldb.com/?ctiid.225329
CVE ID: CVE-2023-1947 State: PUBLISHED Published: 2023-04-07T22:00:08.628Z Last Updated: 2024-08-02T06:05:27.079Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: taoCMS Problem Types: CWE-94 Description: A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225330 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225330 - https://vuldb.com/?ct
y. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225330 - https://vuldb.com/?ctiid.225330 - https://gitee.com/misak7in/cve/blob/master/taocms.md
CVE ID: CVE-2023-1948 State: PUBLISHED Published: 2023-04-08T06:31:03.381Z Last Updated: 2024-08-02T06:05:27.088Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: BP Monitoring Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects some unknown processing of the file add-family-member.php of the component Add New Family Member Handler. The manipulation of the argument Member Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated ide
. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225335. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225335 - https://vuldb.com/?ctiid.225335 - https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/XSS_English.pdf
CVE ID: CVE-2023-1949 State: PUBLISHED Published: 2023-04-08T07:00:06.895Z Last Updated: 2024-08-02T06:05:27.081Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: BP Monitoring Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file change-password.php of the component Change Password Handler. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-2
ck remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225336. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225336 - https://vuldb.com/?ctiid.225336 - https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/ChangePassword.php_SQL_English.pdf
CVE ID: CVE-2023-1950 State: PUBLISHED Published: 2023-04-08T07:31:03.808Z Last Updated: 2024-08-02T06:05:27.090Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: BP Monitoring Management System Problem Types: CWE-89 Description: A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225337
attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225337 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225337 - https://vuldb.com/?ctiid.225337 - https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/password-recovery.php_SQL_English.pdf
CVE ID: CVE-2023-1951 State: PUBLISHED Published: 2023-04-08T08:00:05.752Z Last Updated: 2024-08-02T06:05:27.093Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this issue is the function delete_brand of the file /admin/maintenance/brand.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225338 is the identifier assigned to this vulnerability. Additiona
has been disclosed to the public and may be used. VDB-225338 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225338 - https://vuldb.com/?ctiid.225338 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Delete%20category%20list%20with%20SQL%20injection.pdf
CVE ID: CVE-2023-1952 State: PUBLISHED Published: 2023-04-08T08:31:03.516Z Last Updated: 2025-02-07T20:07:50.045Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as critical. This affects an unknown part of the file /?p=products of the component Product Search. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VD
ely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225339. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225339 - https://vuldb.com/?ctiid.225339 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20in%20the%20search%20bar%20on%20the%20homepage.pdf
CVE ID: CVE-2023-1953 State: PUBLISHED Published: 2023-04-08T09:31:03.689Z Last Updated: 2024-08-02T06:05:27.078Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/sales/index.php. The manipulation of the argument date_start/date_end leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225340. Additional
xploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225340. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225340 - https://vuldb.com/?ctiid.225340 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20in%20sales%20report%20query.pdf
CVE ID: CVE-2023-1954 State: PUBLISHED Published: 2023-04-08T09:31:04.827Z Last Updated: 2024-08-02T06:05:27.086Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been rated as critical. This issue affects the function save_inventory of the file /admin/product/manage.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225341 was assigned to this vulnerability. Additional
been disclosed to the public and may be used. The identifier VDB-225341 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225341 - https://vuldb.com/?ctiid.225341 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20present%20at%20product%20update.pdf
CVE ID: CVE-2023-1955 State: PUBLISHED Published: 2023-04-08T10:00:06.587Z Last Updated: 2024-08-02T06:05:27.069Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225342 is the identifier assigned to this vulnerability.
exploit has been disclosed to the public and may be used. VDB-225342 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.225342 - https://vuldb.com/?ctiid.225342 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/User%20registration%20SQL%20injection.pdf
CVE ID: CVE-2023-1956 State: PUBLISHED Published: 2023-04-08T10:00:07.965Z Last Updated: 2024-08-02T06:05:27.095Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-22 Description: A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_img of the component Image Handler. The manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of
ck can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225343. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225343 - https://vuldb.com/?ctiid.225343 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Any%20file%20deletion%20exists%20in%20the%20system%20management%20department.pdf
CVE ID: CVE-2023-1957 State: PUBLISHED Published: 2023-04-08T10:31:03.498Z Last Updated: 2024-08-02T06:05:27.099Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_sub_category of the component Subcategory Handler. The manipulation of the argument sub_category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used
eads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225344. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225344 - https://vuldb.com/?ctiid.225344 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20subcategory%20list.pdf
CVE ID: CVE-2023-1958 State: PUBLISHED Published: 2023-04-08T10:31:04.469Z Last Updated: 2024-08-02T06:05:27.071Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_sub_category. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225345 was assigned to this vulnerability.
exploit has been disclosed to the public and may be used. The identifier VDB-225345 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225345 - https://vuldb.com/?ctiid.225345 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20present%20at%20subcategory%20deletion.pdf
CVE ID: CVE-2023-1959 State: PUBLISHED Published: 2023-04-08T11:00:05.363Z Last Updated: 2024-11-22T16:49:38.654Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225346 is the identifier assigned to this vulnerability. Ad
xploit has been disclosed to the public and may be used. VDB-225346 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225346 - https://vuldb.com/?ctiid.225346 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20category%20list.pdf
CVE ID: CVE-2023-1960 State: PUBLISHED Published: 2023-04-08T11:31:03.572Z Last Updated: 2024-08-02T06:05:27.097Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225347. Additi
has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225347. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225347 - https://vuldb.com/?ctiid.225347 - https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20deletion%20point%20of%20the%20category%20list.pdf
CVE ID: CVE-2023-1961 State: PUBLISHED Published: 2023-04-08T11:31:04.566Z Last Updated: 2024-08-02T06:05:27.100Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=system_info. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225348. Addit