Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
c and may be used. The identifier of this vulnerability is VDB-265084. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265084 - https://vuldb.com/?ctiid.265084 - https://vuldb.com/?submit.337059 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester%20Simple%20Inventory%20System%20Sql%20Inject-4.md
CVE ID: CVE-2024-5102 State: PUBLISHED Published: 2024-06-10T16:15:56.581Z Last Updated: 2024-08-01T21:03:10.574Z Vendors: Avast Products: Antivirus Problem Types: CWE-1284 Description: A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files or run processes as NT AUTHORITY\SYSTEM. The vulnerability exists within the "Repair" (settings -> troubleshooting -> repair) feature, which attempts to delete a file in the current user's AppData directory as NT AUTHORITY\SYSTEM. A low-privileged user can make a pseudo-symlink and a junction folder and point to a file on the system. This can provide a low-privil
ed user can make a pseudo-symlink and a junction folder and point to a file on the system. This can provide a low-privileged user an Elevation of Privilege to win a race-condition which will re-create the system files and make Windows callback to a specially-crafted file which could be used to launch a privileged shell instance. This issue affects Avast Antivirus prior to 24.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE ID: CVE-2024-5103 State: PUBLISHED Published: 2024-05-19T20:31:04.330Z Last Updated: 2024-08-01T21:03:10.768Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/student_first_payment.php. The manipulation of the argument grade leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265093 was assigned
launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265093 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265093 - https://vuldb.com/?ctiid.265093 - https://vuldb.com/?submit.338506 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%208.pdf
CVE ID: CVE-2024-5104 State: PUBLISHED Published: 2024-05-19T22:00:04.318Z Last Updated: 2024-08-01T21:03:10.559Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/student_grade_wise.php. The manipulation of the argument grade leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265094 is the identifier assigned to this vuln
motely. The exploit has been disclosed to the public and may be used. VDB-265094 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265094 - https://vuldb.com/?ctiid.265094 - https://vuldb.com/?submit.338507 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%209.pdf
CVE ID: CVE-2024-5105 State: PUBLISHED Published: 2024-05-19T22:31:04.156Z Last Updated: 2024-08-01T21:03:10.689Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/student_payment_details.php. The manipulation of the argument index leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265095
exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265095. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265095 - https://vuldb.com/?ctiid.265095 - https://vuldb.com/?submit.338508 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2010.pdf
CVE ID: CVE-2024-5106 State: PUBLISHED Published: 2024-05-19T23:00:05.440Z Last Updated: 2024-08-01T21:03:10.426Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file /view/student_payment_details3.php. The manipulation of the argument index leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265096. Additional A
ploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265096. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265096 - https://vuldb.com/?ctiid.265096 - https://vuldb.com/?submit.338509 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2011.pdf
CVE ID: CVE-2024-5107 State: PUBLISHED Published: 2024-05-19T23:31:04.103Z Last Updated: 2024-08-01T21:03:10.831Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of the file /view/student_payment_details2.php. The manipulation of the argument index leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265097 was assigned to th
ted remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265097 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265097 - https://vuldb.com/?ctiid.265097 - https://vuldb.com/?submit.338511 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2012.pdf
CVE ID: CVE-2024-5108 State: PUBLISHED Published: 2024-05-20T00:00:04.817Z Last Updated: 2024-08-01T21:03:10.692Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/student_payment_details4.php. The manipulation of the argument index leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-265098 is the identifier assigned to this vulner
tely. The exploit has been disclosed to the public and may be used. VDB-265098 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265098 - https://vuldb.com/?ctiid.265098 - https://vuldb.com/?submit.338512 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2013.pdf
CVE ID: CVE-2024-5109 State: PUBLISHED Published: 2024-05-20T00:31:03.863Z Last Updated: 2024-08-01T21:03:10.993Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /view/student_payment_history.php. The manipulation of the argument index leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vuln
launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265099. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265099 - https://vuldb.com/?ctiid.265099 - https://vuldb.com/?submit.338513 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2014.pdf
CVE ID: CVE-2024-5110 State: PUBLISHED Published: 2024-05-20T01:00:04.242Z Last Updated: 2024-08-01T21:03:10.707Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view/student_payment_invoice.php. The manipulation of the argument index leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-26510
emotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265100. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265100 - https://vuldb.com/?ctiid.265100 - https://vuldb.com/?submit.338514 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2015.pdf
CVE ID: CVE-2024-5111 State: PUBLISHED Published: 2024-05-20T01:31:03.941Z Last Updated: 2024-08-01T21:03:10.663Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. This affects an unknown part of the file /view/student_payment_invoice1.php. The manipulation of the argument date leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265101 was assigned to this vulner
ely. The exploit has been disclosed to the public and may be used. The identifier VDB-265101 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265101 - https://vuldb.com/?ctiid.265101 - https://vuldb.com/?submit.338515 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2016.pdf
CVE ID: CVE-2024-5112 State: PUBLISHED Published: 2024-05-20T02:00:04.760Z Last Updated: 2024-08-01T21:03:10.871Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view/student_profile.php. The manipulation of the argument std_index leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-265102 is the identifier assigned to this vulnerabilit
The exploit has been disclosed to the public and may be used. VDB-265102 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265102 - https://vuldb.com/?ctiid.265102 - https://vuldb.com/?submit.338516 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2017.pdf
CVE ID: CVE-2024-5113 State: PUBLISHED Published: 2024-05-20T02:31:04.268Z Last Updated: 2024-08-01T21:03:10.907Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /view/student_profile1.php. The manipulation of the argument std_index leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-26
The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265103. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265103 - https://vuldb.com/?ctiid.265103 - https://vuldb.com/?submit.338517 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2018.pdf
CVE ID: CVE-2024-5114 State: PUBLISHED Published: 2024-05-20T03:00:04.848Z Last Updated: 2024-08-01T21:03:10.672Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teacher_attendance_history1.php. The manipulation of the argument index leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265104. Addi
. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265104. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265104 - https://vuldb.com/?ctiid.265104 - https://vuldb.com/?submit.338518 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2019.pdf
CVE ID: CVE-2024-5115 State: PUBLISHED Published: 2024-05-20T03:31:04.109Z Last Updated: 2024-08-01T21:03:10.817Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teacher_profile.php. The manipulation of the argument index leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265105 was assigned to this vulnerab
y. The exploit has been disclosed to the public and may be used. The identifier VDB-265105 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265105 - https://vuldb.com/?ctiid.265105 - https://vuldb.com/?submit.338519 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20sql/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2020.pdf
CVE ID: CVE-2024-5116 State: PUBLISHED Published: 2024-05-20T04:00:04.041Z Last Updated: 2024-08-01T21:03:10.921Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Examination System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265196. Additional Analyst Notes: - CISA ADP
to the public and may be used. The identifier of this vulnerability is VDB-265196. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265196 - https://vuldb.com/?ctiid.265196 - https://vuldb.com/?submit.338578 - https://github.com/polaris0x1/CVE/issues/3
CVE ID: CVE-2024-5117 State: PUBLISHED Published: 2024-05-20T04:31:03.945Z Last Updated: 2024-08-01T21:03:10.750Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Event Registration System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file portal.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265197 was assigned to this vulnerability. Additional Analyst Notes: - C
the public and may be used. The identifier VDB-265197 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265197 - https://vuldb.com/?ctiid.265197 - https://github.com/BurakSevben/CVEs/blob/main/Event%20Registration%20System/Event%20Registration%20System%20-%20SQL%20Injection%20-%201.md
CVE ID: CVE-2024-5118 State: PUBLISHED Published: 2024-05-20T05:00:04.991Z Last Updated: 2024-08-01T21:03:10.928Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Event Registration System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-265198 is the identifier assigned to this vulnerability. Additional Analyst Notes:
d to the public and may be used. VDB-265198 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265198 - https://vuldb.com/?ctiid.265198 - https://vuldb.com/?submit.338612 - https://github.com/BurakSevben/CVEs/blob/main/Event%20Registration%20System/Event%20Registration%20System%20-%20SQL%20Injection%20-%201.md
CVE ID: CVE-2024-5119 State: PUBLISHED Published: 2024-05-20T05:31:04.672Z Last Updated: 2024-08-01T21:03:10.709Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Event Registration System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=load_registration. The manipulation of the argument last_id/event_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265199. Addi
it has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265199. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265199 - https://vuldb.com/?ctiid.265199 - https://vuldb.com/?submit.338613 - https://github.com/BurakSevben/CVEs/blob/main/Event%20Registration%20System/Event%20Registration%20System%20-%20SQL%20Injection%20-%202.md
CVE ID: CVE-2024-5120 State: PUBLISHED Published: 2024-05-20T06:00:05.547Z Last Updated: 2024-08-01T21:03:10.685Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Event Registration System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /registrar/?page=registration. The manipulation of the argument e leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265200. Additional Analyst Notes: - CISA A
ed to the public and may be used. The identifier of this vulnerability is VDB-265200. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265200 - https://vuldb.com/?ctiid.265200 - https://vuldb.com/?submit.338614 - https://github.com/BurakSevben/CVEs/blob/main/Event%20Registration%20System/Event%20Registration%20System%20-%20SQL%20Injection%20-%203.md
CVE ID: CVE-2024-5121 State: PUBLISHED Published: 2024-05-20T06:31:04.701Z Last Updated: 2024-08-01T21:03:10.676Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Event Registration System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /registrar/?page=registration. The manipulation of the argument e leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265201 was assigned to this vulnerability.
exploit has been disclosed to the public and may be used. The identifier VDB-265201 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265201 - https://vuldb.com/?ctiid.265201 - https://vuldb.com/?submit.338617 - https://github.com/BurakSevben/CVEs/blob/main/Event%20Registration%20System/Event%20Registration%20System%20-%20Cross-Site-Scripting%20-%202.md