Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-2546 State: PUBLISHED Published: 2024-03-17T01:31:04.350Z Last Updated: 2024-08-01T19:18:47.953Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC18 Problem Types: CWE-121 Description: A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical. Affected by this vulnerability is the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256999. NOTE: The vendor was contacted early about this disclosure but did
iated identifier of this vulnerability is VDB-256999. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.256999 - https://vuldb.com/?ctiid.256999 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/A18/fromSetWirelessRepeat_a.md
CVE ID: CVE-2024-2547 State: PUBLISHED Published: 2024-03-17T03:31:03.829Z Last Updated: 2024-08-21T15:16:52.674Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC18 Problem Types: CWE-121 Description: A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257000. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additi
ability is VDB-257000. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257000 - https://vuldb.com/?ctiid.257000 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/R7WebsSecurityHandler.md
CVE ID: CVE-2024-2548 State: PUBLISHED Published: 2024-06-06T18:08:15.065Z Last Updated: 2024-08-01T19:18:48.129Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-36 Description: A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `lollms_core/lollms/server/endpoints/lollms_binding_files_server.py` and `lollms_core/lollms/security.py` files. Due to inadequate validation of file paths between Windows and Linux environments using `Path(path).is_absolute()`, attackers can exploit this flaw to read any file on the system. This issue affects the latest ver
(path).is_absolute()`, attackers can exploit this flaw to read any file on the system. This issue affects the latest version of LoLLMs running on the Windows platform. The vulnerability is triggered when an attacker sends a specially crafted request to the `/user_infos/{path:path}` endpoint, allowing the reading of arbitrary files, as demonstrated with the `win.ini` file. The issue has been addressed in version 9.5 of the software. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/65979513-db0d-46fd-9977-fcd73bcd8a41 - https://github.com/parisneo/lollms-webui/commit/49b0332e98d42dd5204dda53dee410b160106265
CVE ID: CVE-2024-2550 State: PUBLISHED Published: 2024-11-14T09:40:38.838Z Last Updated: 2024-11-14T14:11:24.889Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-476 Description: A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/
aintenance mode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-2550
CVE ID: CVE-2024-2551 State: PUBLISHED Published: 2024-11-14T09:36:09.876Z Last Updated: 2024-11-19T15:01:40.744Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-476 Description: A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-2551
CVE ID: CVE-2024-2552 State: PUBLISHED Published: 2024-11-14T09:39:06.523Z Last Updated: 2024-11-14T19:08:21.217Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-22 Description: A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-2552
CVE ID: CVE-2024-2553 State: PUBLISHED Published: 2024-03-17T04:00:08.259Z Last Updated: 2024-08-08T18:56:04.787Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Product Review Rating System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Product Review Rating System 1.0. Affected is an unknown function of the component Rate Product Handler. The manipulation of the argument Your Name/Comment leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257052. Additiona
exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257052. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257052 - https://vuldb.com/?ctiid.257052 - https://vuldb.com/?submit.298886 - https://github.com/BurakSevben/CVEs/blob/main/Product%20Rating%20System/CVE-2024-2553%20-%20Product%20Rating%20System%20-%20Cross-Site-Scripting.md - https://github.com/BurakSevben/CVEs/blob/main/Product%20Rating%20System/Product%20Rating%20System%20-%20Cross-Site-Scripting-1.md
CVE ID: CVE-2024-2554 State: PUBLISHED Published: 2024-03-17T04:31:04.177Z Last Updated: 2024-08-22T19:10:50.309Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee Task Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file update-employee.php. The manipulation of the argument admin_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257053 was assigned to this vulnerability. A
xploit has been disclosed to the public and may be used. The identifier VDB-257053 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257053 - https://vuldb.com/?ctiid.257053 - https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/2024/Task%20Management%20System%20-%20multiple%20vulnerabilities.md#3sql-injection-vulnerability-in-update-employeephp
CVE ID: CVE-2024-2555 State: PUBLISHED Published: 2024-03-17T06:31:04.155Z Last Updated: 2024-08-01T19:18:48.251Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee Task Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument admin_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257054 is the identifier assigned to this vulnerability. Additional Analy
n disclosed to the public and may be used. VDB-257054 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257054 - https://vuldb.com/?ctiid.257054 - https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/2024/Task%20Management%20System%20-%20multiple%20vulnerabilities.md#4sql-injection-vulnerability-in-update-adminphp
CVE ID: CVE-2024-2556 State: PUBLISHED Published: 2024-03-17T08:00:06.613Z Last Updated: 2024-08-08T20:43:42.705Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee Task Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument user_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257055. Additional Analy
disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257055. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257055 - https://vuldb.com/?ctiid.257055 - https://github.com/tht1997/WhiteBox/blob/main/sourcecodesters/employee-management-system-php-attendance-info.md
CVE ID: CVE-2024-2557 State: PUBLISHED Published: 2024-03-17T08:31:04.409Z Last Updated: 2024-08-27T14:14:55.226Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: kishor-23 Products: Food Waste Management System Problem Types: CWE-285 Description: A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257056. NOTE: The vendor was contacted early abo
the public and may be used. The identifier of this vulnerability is VDB-257056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257056 - https://vuldb.com/?ctiid.257056 - https://github.com/vanitashtml/CVE-Dumps/blob/main/Execute%20After%20Redirect%20-%20Food%20Management%20System.md
CVE ID: CVE-2024-2558 State: PUBLISHED Published: 2024-03-17T09:00:07.516Z Last Updated: 2024-08-02T17:32:11.576Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC18 Problem Types: CWE-121 Description: A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257057 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but d
entifier VDB-257057 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257057 - https://vuldb.com/?ctiid.257057 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/formexeCommand.md
CVE ID: CVE-2024-2559 State: PUBLISHED Published: 2024-03-17T09:31:04.514Z Last Updated: 2024-08-01T19:18:46.983Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Tenda Products: AC18 Problem Types: CWE-352 Description: A vulnerability classified as problematic has been found in Tenda AC18 15.03.05.05. Affected is the function fromSysToolReboot of the file /goform/SysToolReboot. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257058 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any
er assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257058 - https://vuldb.com/?ctiid.257058 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromSysToolReboot.md
CVE ID: CVE-2024-2560 State: PUBLISHED Published: 2024-03-17T10:31:04.158Z Last Updated: 2024-08-05T20:02:13.797Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Tenda Products: AC18 Problem Types: CWE-352 Description: A vulnerability classified as problematic was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromSysToolRestoreSet of the file /goform/SysToolRestoreSet. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257059. NOTE: The vendor was contacted early about this disclosure but did
ated identifier of this vulnerability is VDB-257059. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257059 - https://vuldb.com/?ctiid.257059 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromSysToolRestoreSet.md
CVE ID: CVE-2024-2561 State: PUBLISHED Published: 2024-03-17T11:00:07.747Z Last Updated: 2024-08-08T20:40:02.811Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: 74CMS Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.php#sendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257060. Additional
exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257060. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257060 - https://vuldb.com/?ctiid.257060 - https://gist.github.com/Southseast/9f5284d8ee0f6d91e72eef73b285512a
CVE ID: CVE-2024-2562 State: PUBLISHED Published: 2024-03-17T11:31:04.914Z Last Updated: 2024-08-23T20:47:45.661Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PandaXGO Products: PandaX Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/services/role_menu.go. The manipulation of the argument roleKey leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257061 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Contai
ay be used. The identifier VDB-257061 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257061 - https://vuldb.com/?ctiid.257061 - https://github.com/PandaXGO/PandaX/issues/4
CVE ID: CVE-2024-2563 State: PUBLISHED Published: 2024-03-17T12:00:05.455Z Last Updated: 2024-08-12T15:52:28.472Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: PandaXGO Products: PandaX Problem Types: CWE-24 Description: A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical. This vulnerability affects the function DeleteImage of the file /apps/system/router/upload.go. The manipulation of the argument fileName with the input ../../../../../../../../../tmp/1.txt leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257062 is the identifier assigned to th
ated remotely. The exploit has been disclosed to the public and may be used. VDB-257062 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257062 - https://vuldb.com/?ctiid.257062 - https://github.com/PandaXGO/PandaX/pull/3
CVE ID: CVE-2024-2564 State: PUBLISHED Published: 2024-03-17T14:00:06.586Z Last Updated: 2024-08-22T19:12:14.155Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PandaXGO Products: PandaX Problem Types: CWE-24 Description: A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257063. Additional Analyst Notes: - CVE Program Container:
used. The associated identifier of this vulnerability is VDB-257063. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257063 - https://vuldb.com/?ctiid.257063 - https://github.com/PandaXGO/PandaX/issues/6
CVE ID: CVE-2024-2565 State: PUBLISHED Published: 2024-03-17T14:31:04.357Z Last Updated: 2024-08-12T15:52:09.649Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PandaXGO Products: PandaX Problem Types: CWE-434 Description: A vulnerability was found in PandaXGO PandaX up to 20240310. It has been classified as critical. Affected is an unknown function of the file /apps/system/router/upload.go of the component File Extension Handler. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257064. Additional Analyst Note
een disclosed to the public and may be used. The identifier of this vulnerability is VDB-257064. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257064 - https://vuldb.com/?ctiid.257064 - https://github.com/PandaXGO/PandaX/issues/5
CVE ID: CVE-2024-2566 State: PUBLISHED Published: 2024-03-17T15:00:06.050Z Last Updated: 2024-08-12T16:39:39.405Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Fujian Kelixin Communication Products: Command and Dispatch Platform Problem Types: CWE-89 Description: A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file api/client/get_extension_yl.php. The manipulation of the argument imei leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB
n. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257065 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257065 - https://vuldb.com/?ctiid.257065 - https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-get_extension_yl.pdf
CVE ID: CVE-2024-2567 State: PUBLISHED Published: 2024-03-17T21:00:05.635Z Last Updated: 2024-08-01T19:18:46.973Z Severity: LOW (CVSS 1.8 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: jurecapuder Products: AndroidWeatherApp Problem Types: CWE-530 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the
orized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. VDB-257070 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: The code maintainer was contacted early about this disclosure but did not respond in any way. Instead the GitHub repository got deleted after a few days. We have to assume that the product is not supported anymore. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257070 - https://vuldb.com/?ctiid.257070 - https://github.com/ctfl
rogram Container: References: - https://vuldb.com/?id.257070 - https://vuldb.com/?ctiid.257070 - https://github.com/ctflearner/Android_Findings/blob/main/AndroidWeatherApp/Android_backup.md
CVE ID: CVE-2024-2568 State: PUBLISHED Published: 2024-03-17T23:00:07.874Z Last Updated: 2024-08-02T18:31:33.992Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: heyewei Products: JFinalCMS Problem Types: CWE-89 Description: A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/div_data/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257071. Additional Analyst Notes: - CVE Prog
lic and may be used. The associated identifier of this vulnerability is VDB-257071. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.257071 - https://vuldb.com/?ctiid.257071 - https://github.com/bigbigbigbaby/cms/blob/main/5.md
CVE ID: CVE-2024-2569 State: PUBLISHED Published: 2024-03-17T23:31:04.482Z Last Updated: 2024-08-02T17:22:44.764Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee Task Management System Problem Types: CWE-698 Description: A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin-manage-user.php. The manipulation leads to execution after redirect. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257072. Additional Analyst Notes: - CVE