Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-39649 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T16:26:08.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop. In the module “Theme Volty CMS Category Slider” (tvcmscategoryslider) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/09/26/tvcmscategoryslider.html
CVE ID: CVE-2023-39650 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T14:06:25.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://themevolty.com/ - https://security.friendsofpresta.org/modules/2023/08/24/tvcmsblog.html
CVE ID: CVE-2023-39651 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T16:24:27.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tvcmsbrandlist) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/09/26/tvcmsbrandlist.html
CVE ID: CVE-2023-39652 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T14:00:14.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://themevolty.com/ - https://security.friendsofpresta.org/modules/2023/08/24/tvcmsvideotab.html
CVE ID: CVE-2023-39654 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-30T20:10:06.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.search_to_symbol_dict. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bbfamily/abu - https://github.com/Leeyangee/leeya_bug/blob/main/%5BWarning%5DSQL%20Injection%20in%20abupy%20%3C=%20v0.4.0.md
CVE ID: CVE-2023-39655 State: PUBLISHED Published: 2024-01-03T00:00:00.000Z Last Updated: 2025-06-18T15:24:04.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a specially crafted host header in the forgot password request, it is possible to send password reset links to users which, once clicked, lead to an attacker-controlled server and thus leak the password reset token. This may allow an attacker to reset other users' passwords and take over their accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.npmj
eir accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.npmjs.com/package/%40perfood/couch-auth - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-39655
CVE ID: CVE-2023-39659 State: PUBLISHED Published: 2023-08-15T00:00:00 Last Updated: 2024-10-08T20:28:08.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/langchain-ai/langchain/issues/7700 - https://github.com/langchain-ai/langchain/pull/5640
CVE ID: CVE-2023-39660 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-07T16:42:08.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gventuri/pandas-ai/issues/399 - https://github.com/gventuri/pandas-ai/pull/409
CVE ID: CVE-2023-39661 State: PUBLISHED Published: 2023-08-15T00:00:00 Last Updated: 2024-10-08T20:27:01.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gventuri/pandas-ai/issues/410
CVE ID: CVE-2023-39662 State: PUBLISHED Published: 2023-08-15T00:00:00 Last Updated: 2024-10-08T20:26:15.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryjliu/llama_index/issues/7054
CVE ID: CVE-2023-39663 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-02T13:23:58.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mathjax/MathJax/issues/3074
CVE ID: CVE-2023-39665 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T18:51:47.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.com/ - https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR-868L-bufferoverflow.md
CVE ID: CVE-2023-39666 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T18:44:00.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.com/ - https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR-842%20buffer%20overflow.md
CVE ID: CVE-2023-39667 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-08-02T18:18:09.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.com/ - https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR-868L%20httpd-Improper%20Input%20Validation.md
CVE ID: CVE-2023-39668 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T18:33:55.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.com/ - https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR-868L%20Buffer%20overflow%202.md
CVE ID: CVE-2023-39669 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T18:32:28.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.com/ - https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/880%20unchecked%20return%20value.md
CVE ID: CVE-2023-39670 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T17:45:50.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/list-3.html - https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/AC6%20buffer%20overflow.md
CVE ID: CVE-2023-39671 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T17:33:40.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.com/ - https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR880%20buffer%20overflow.md
CVE ID: CVE-2023-39672 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T17:27:53.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/list-3.html - https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/WH450%20buffer%20overflow.md
CVE ID: CVE-2023-39673 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T17:26:35.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/list-3.html - https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/AC15%20Impoper%20Input%20Validation.md
CVE ID: CVE-2023-39674 State: PUBLISHED Published: 2023-08-18T00:00:00 Last Updated: 2024-10-07T17:23:39.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.com/ - https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR880%20buffe%20overflow.md
CVE ID: CVE-2023-39675 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:22:34.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sorcery.ie - https://blog.sorcery.ie/posts/simpleimportproduct_sqli/
CVE ID: CVE-2023-39676 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:56:57.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback parameter at ajax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sorcery.ie - https://themeforest.net/user/fieldthemes - https://blog.sorcery.ie/posts/fieldpopupnewsletter_xss/
CVE ID: CVE-2023-39677 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:21:56.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://myprestamodules.com/ - https://sorcery.ie - https://blog.sorcery.ie/posts/myprestamodules_phpinfo/
CVE ID: CVE-2023-39678 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-02T13:23:01.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the device web interface (Log Query page) of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://telegra.ph/XSS-in-BDCOM-OLT-P3310D-2AC-07-29
CVE ID: CVE-2023-39680 State: PUBLISHED Published: 2023-10-20T00:00:00 Last Updated: 2024-09-12T17:52:28.898Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Sollace Unicopia version 1.1.1 and before was discovered to deserialize untrusted data, allowing attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/apple502j/4ab77291c98e45f4a5bf780c8eda8afa
CVE ID: CVE-2023-39681 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-30T19:18:19.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php. This vulnerability is triggered via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yanbochen97/CuppaCMS_RCE
CVE ID: CVE-2023-39683 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-05-15T19:40:35.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in EasyEmail v.4.12.2 and before allows a local attacker to execute arbitrary code via the user input parameter(s). NOTE: Researcher claims issue is present in all versions prior and later than tested version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zalify/easy-email/issues/321 - https://github.com/zalify/easy-email/issues/373 - https://medium.com/%40vificatem/cve-2023-39683-dom-xss-on-json-source-code-panel-in-z
com/zalify/easy-email/issues/373 - https://medium.com/%40vificatem/cve-2023-39683-dom-xss-on-json-source-code-panel-in-zalify-easy-email-3fa08f3e0d49
CVE ID: CVE-2023-39685 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T13:17:57.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hjson/hjson-java/issues/27
CVE ID: CVE-2023-39691 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-02T15:12:23.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.mo60.cn/index.php/archives/kodbox_Logical.html
CVE ID: CVE-2023-39695 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-12T14:01:39.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strik3r0x1/Vulns/blob/35fe4fb3d5945b5df2a87aab0cf9ec6137bcf976/Insufficient%20Session%20Expiration%20-%20Elenos.md
CVE ID: CVE-2023-39699 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:35:00.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/98.html - https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/07-Input_Validation_Testing/11.1-Te
sp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/07-Input_Validation_Testing/11.1-Testing_for_Local_File_Inclusion - https://drive.google.com/file/d/1NkqL4ySJApyPy8B-zDC7vE-QMBQAu8OU
CVE ID: CVE-2023-39700 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:33:22.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/79.html - https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_%28XSS%29 - https://drive.google.com/file/d/1QL_517UbTFJox4CXKQpP9fehR1yXRJ-y
CVE ID: CVE-2023-39703 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T13:17:31.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via uploading a crafted Markdown file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://c0olw.github.io/2023/07/31/Typora-XSS-Vulnerability/
CVE ID: CVE-2023-39707 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T16:45:30.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/ - https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/b94
hp/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/b94d7ce74fcf16014e282a9b525f4555#file-cve-2023-39707
CVE ID: CVE-2023-39708 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T13:59:18.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com - https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/6c544ae8
741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/6c544ae8bebd2a36926fd3fdc8d4d5c2#file-cve-2023-39708
CVE ID: CVE-2023-39709 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T13:58:26.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Member section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/ - https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.githu
.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/4cb86f9239c73ccfeaf466352513b188#file-cve-2023-39709
CVE ID: CVE-2023-39710 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T14:27:46.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/ - https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.git
ww.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/dc6e4dd231accf777dae30d890a4e7df#file-cve-2023-39710
CVE ID: CVE-2023-39711 State: PUBLISHED Published: 2023-09-07T00:00:00 Last Updated: 2024-09-26T17:40:48.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Subtotal and Paidbill parameters under the Add New Put section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/ - https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.co
rcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/1683f9640c0d62337e0bbe23569d1ea5#file-cve-2023-39711
CVE ID: CVE-2023-39712 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:55:18.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/ - https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.gith
w.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/836b586cfb8faeb4edbe57ff1c5dc457#file-cve-2023-39712