Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-13008 State: PUBLISHED Published: 2024-12-29T09:31:05.210Z Last Updated: 2024-12-30T14:51:14.128Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Responsive Hotel Site Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/newsletter.php. The manipulation of the argument eid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289669 - https://vuldb.com/?ctiid.289669 - https://vuldb.com/?submit.470575 - https://github.com/Err-4O4/cve/issues/1 - https://github.com/Lanxiy7th/lx_CVE_report-/issues/18 - https://code-projects.org/
CVE ID: CVE-2024-13009 State: PUBLISHED Published: 2025-05-08T17:29:31.380Z Last Updated: 2025-05-08T18:56:39.446Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Eclipse Foundation Products: Jetty Problem Types: CWE-404 Description: In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.eclipse.org/security/cve-assignement/-/issues/48 - https://github.com/jetty/jetty.project/security/advisories/GHSA-q4rv-gq96-w7c
org/security/cve-assignement/-/issues/48 - https://github.com/jetty/jetty.project/security/advisories/GHSA-q4rv-gq96-w7c5
CVE ID: CVE-2024-13010 State: PUBLISHED Published: 2025-02-10T18:42:44.686Z Last Updated: 2025-02-12T15:49:03.047Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Chimpstudio Products: WP Foodbakery Problem Types: CWE-79 Description: The WP Foodbakery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.7 due to insufficient input sanitization and output escaping on the 'search_type' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analys
at execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f267527d-5fb5-4fc2-bb35-bc60854f1a68?source=cve - https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331
CVE ID: CVE-2024-13011 State: PUBLISHED Published: 2025-02-10T18:42:37.887Z Last Updated: 2025-02-12T15:48:47.736Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Chimpstudio Products: WP Foodbakery Problem Types: CWE-434 Description: The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'upload_publisher_profile_image' function in versions up to, and including, 4.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/850fc4db-6e02-44c7-836a-02c433a0bae7?source=cve - https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331
CVE ID: CVE-2024-13012 State: PUBLISHED Published: 2024-12-29T12:00:16.665Z Last Updated: 2024-12-30T14:50:35.708Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /admin/registration.php. The manipulation of the argument fname/mname/lname leads to cross site scripting. The attack may be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289703 - https://vuldb.com/?cti
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289703 - https://vuldb.com/?ctiid.289703 - https://vuldb.com/?submit.469228 - https://code-projects.org/
CVE ID: CVE-2024-13013 State: PUBLISHED Published: 2024-12-29T13:31:07.047Z Last Updated: 2024-12-30T14:46:40.705Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Maid Hiring Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Affected is an unknown function of the file /admin/contactus.php of the component Contact Us Page. The manipulation of the argument page title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA AD
h the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289704 - https://vuldb.com/?ctiid.289704 - https://vuldb.com/?submit.470462 - https://phpgurukul.com/
CVE ID: CVE-2024-13014 State: PUBLISHED Published: 2024-12-29T15:00:12.948Z Last Updated: 2024-12-30T14:46:04.393Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Maid Hiring Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search-maid.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289705 - https://vuldb.com/?ctiid.289705 - https://vuldb.com/?submit.470468 - https://phpgurukul.com/
CVE ID: CVE-2024-13015 State: PUBLISHED Published: 2024-12-29T15:31:05.380Z Last Updated: 2024-12-30T14:45:31.573Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Maid Hiring Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search-booking-request.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289706 - https://vuldb.com
otely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289706 - https://vuldb.com/?ctiid.289706 - https://vuldb.com/?submit.470479 - https://phpgurukul.com/
CVE ID: CVE-2024-13016 State: PUBLISHED Published: 2024-12-29T16:00:15.847Z Last Updated: 2024-12-30T14:45:04.836Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Maid Hiring Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289707 - https://vuldb.com/?ctiid.289707 - https://vuldb.com/?submit.470480 - https://phpgurukul.com/
CVE ID: CVE-2024-13017 State: PUBLISHED Published: 2024-12-29T17:00:13.573Z Last Updated: 2024-12-31T16:00:42.973Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Maid Hiring Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289708 - https://vul
ed remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289708 - https://vuldb.com/?ctiid.289708 - https://vuldb.com/?submit.470481 - https://phpgurukul.com/
CVE ID: CVE-2024-13018 State: PUBLISHED Published: 2024-12-29T18:00:13.306Z Last Updated: 2024-12-30T18:59:49.828Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Maid Hiring Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/profile.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289709 - https://vuldb.com/?ctiid.289709 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289709 - https://vuldb.com/?ctiid.289709 - https://vuldb.com/?submit.470508 - https://phpgurukul.com/
CVE ID: CVE-2024-13019 State: PUBLISHED Published: 2024-12-29T18:31:04.547Z Last Updated: 2024-12-30T18:53:30.848Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Chat System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/update_room.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289710 - https://vuldb.com/?ctiid.289710 - https://vul
tes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289710 - https://vuldb.com/?ctiid.289710 - https://vuldb.com/?submit.470599 - https://code-projects.org/
CVE ID: CVE-2024-13020 State: PUBLISHED Published: 2024-12-29T19:00:13.477Z Last Updated: 2024-12-30T18:51:57.012Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Chat System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289711 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289711 - https://vuldb.com/?ctiid.289711 - https://vuldb.com/?submit.470600 - https://code-projects.org/
CVE ID: CVE-2024-13021 State: PUBLISHED Published: 2024-12-29T19:31:05.923Z Last Updated: 2025-02-01T18:56:08.264Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Road Accident Map Marker Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the argument mark_name/details leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Ad
d remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289712 - https://vuldb.com/?ctiid.289712 - https://vuldb.com/?submit.469267 - https://github.com/shaturo1337/POCs/blob/main/Stored%20XSS%20Vulnerability%20in%20Road%20Accident%20Map%20Marker.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-13022 State: PUBLISHED Published: 2024-12-29T20:00:13.083Z Last Updated: 2024-12-30T16:09:52.900Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: taisan Products: tarzan-cms Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional
t is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289713 - https://vuldb.com/?ctiid.289713 - https://vuldb.com/?submit.467471 - https://gitee.com/taisan/tarzan-cms/issues/IBCUPG
CVE ID: CVE-2024-13023 State: PUBLISHED Published: 2024-12-29T20:31:06.045Z Last Updated: 2024-12-30T16:08:44.199Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Maid Hiring Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/search-maid.php of the component Search Maid Page. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA AD
be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289714 - https://vuldb.com/?ctiid.289714 - https://vuldb.com/?submit.470461 - https://phpgurukul.com/
CVE ID: CVE-2024-13024 State: PUBLISHED Published: 2024-12-29T21:00:11.575Z Last Updated: 2024-12-30T16:07:38.435Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /campaign.php. The manipulation of the argument cname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
c and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289715 - https://vuldb.com/?ctiid.289715 - https://vuldb.com/?submit.471038 - https://github.com/isRainy/VULDB/blob/main/Blood_Bank_Management_System.md
CVE ID: CVE-2024-13025 State: PUBLISHED Published: 2024-12-29T22:31:04.976Z Last Updated: 2024-12-30T17:12:18.709Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: College Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Codezips College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Front-end/faculty.php. The manipulation of the argument book_name/book_author leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289716 - https://vuldb.com/?ctiid.289716 - https://vuldb.com/?submit.471108 - https://github.com/shaturo1337/POCs/blob/main/SQL%20Injection%20in%20College%20Management%20System.md
CVE ID: CVE-2024-13026 State: PUBLISHED Published: 2025-01-17T20:02:32.351Z Last Updated: 2025-02-12T20:31:25.559Z Vendors: Roche Diagnostics Products: Algorithm Suite Problem Types: CWE-326 Description: A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The vulnerability impacts the authentication mechanism of this component and could allow an attacker with adjacent access to the laboratory network and the Algo Edge system to craft valid authentication tokens and access the component. Other components of navify® Algorithm Suite are not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://diagnostic
y® Algorithm Suite are not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://diagnostics.roche.com/content/dam/diagnostics/Blueprint/en/pdf/Algo%20Edge%20-%20Authentication%20Vulnerability%20-%20Product%20Security%20Advisory.pdf
CVE ID: CVE-2024-13028 State: PUBLISHED Published: 2024-12-29T23:00:08.707Z Last Updated: 2024-12-30T14:43:55.462Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Antabot Products: White-Jotter Problem Types: CWE-204, CWE-203 Description: A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This issue affects some unknown processing of the file /login. The manipulation of the argument username leads to observable response discrepancy. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may
n attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289721 - https://vuldb.com/?ctiid.289721 - https://vuldb.com/?submit.465924 - https://github.com/cydtseng/Vulnerability-Research/blob/main/white-jotter/ObservableDiscrepancy-UserLogin.md
CVE ID: CVE-2024-13029 State: PUBLISHED Published: 2024-12-29T23:31:05.264Z Last Updated: 2024-12-30T14:43:01.361Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Antabot Products: White-Jotter Problem Types: CWE-918 Description: A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289722 - https://vuldb.com/?ctiid.289722 - https://vuldb.com/?submit.465942 - https://github.com/cydtseng/Vulnerability-Research/blob/main/white-jotter/ServerSideRequestForgery-BookCoverURL.md
CVE ID: CVE-2024-13030 State: PUBLISHED Published: 2024-12-30T00:00:28.731Z Last Updated: 2024-12-30T14:42:25.836Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: D-Link Products: DIR-823G Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file /HNAP1/ of the component Web Management Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the pu
lation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289763 - https://vuldb.com/?ctiid.289763 - https://vuldb.com/?submit.467903 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-823G/SetAutoRebootSettings.md - https://www.dlink.com.cn/about/article/news?id=2247 - https://www.dlink.com/
CVE ID: CVE-2024-13031 State: PUBLISHED Published: 2024-12-30T00:31:04.838Z Last Updated: 2024-12-30T14:41:13.818Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Antabot Products: White-Jotter Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289764
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289764 - https://vuldb.com/?ctiid.289764 - https://vuldb.com/?submit.466530 - https://github.com/cydtseng/Vulnerability-Research/blob/main/white-jotter/ReflectedXSS-ContentEditor.md
CVE ID: CVE-2024-13032 State: PUBLISHED Published: 2024-12-30T01:00:13.613Z Last Updated: 2024-12-30T14:40:45.431Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Antabot Products: White-Jotter Problem Types: CWE-918 Description: A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289765 - https://vuldb.com/?ctiid.289765 - https://vuldb.com/?submit.466551 - https://github.com/cydtseng/Vulnerability-Research/blob/main/white-jotter/ServerSideRequestForgery-ArticleCoverURL.md
CVE ID: CVE-2024-13033 State: PUBLISHED Published: 2024-12-30T01:31:05.255Z Last Updated: 2024-12-30T14:26:30.795Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Chat System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.28976