Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-22937 State: PUBLISHED Published: 2021-08-17T18:52:13 Last Updated: 2024-08-04T14:51:11.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leadscloud/EmpireCMS/issues/4 - https://cwe.mitre.org/data/definitions/96.html
CVE ID: CVE-2020-22983 State: PUBLISHED Published: 2022-05-13T12:31:11 Last Updated: 2024-08-04T14:51:11.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to conduct a server-side request forgery (SSRF) attack via the srcURL parameter to the shortURL task. Additional Analyst Notes: - CVE Program Container: References: - http://microstrategy.com - http://www.yourcompany.com:8080/MicroStrategy/servlet/taskProc - https://tinyurl.com/ - https://www.microstrategy.com/us/report-a-security-vulnerability - https://medium.com/%40win3zz/how-i-made-3
yurl.com/ - https://www.microstrategy.com/us/report-a-security-vulnerability - https://medium.com/%40win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204
CVE ID: CVE-2020-22984 State: PUBLISHED Published: 2022-05-12T19:57:58 Last Updated: 2024-08-04T14:51:11.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via key parameter to the getGoogleExtraConfig task. Additional Analyst Notes: - CVE Program Container: References: - http://microstrategy.com - http://www.yourcompany.com:8080/MicroStrategy/servlet/taskProc - https://www.microstrategy.com/us/report-a-security-vulnerability - https://medium.com/%40win3zz/simple-story-of-some-complicated-xss-on-facebook-8a9c0d80969d
CVE ID: CVE-2020-22985 State: PUBLISHED Published: 2022-05-12T19:58:23 Last Updated: 2024-08-04T14:51:11.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task. Additional Analyst Notes: - CVE Program Container: References: - http://microstrategy.com - http://www.yourcompany.com:8080/MicroStrategy/servlet/taskProc - https://www.microstrategy.com/us/report-a-security-vulnerability - https://medium.com/%40win3zz/simple-story-of-some-complicated-xss-on-facebook-8a9c0d80969d
CVE ID: CVE-2020-22986 State: PUBLISHED Published: 2022-05-12T19:58:15 Last Updated: 2024-08-04T14:51:11.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the searchString parameter to the wikiScrapper task. Additional Analyst Notes: - CVE Program Container: References: - http://microstrategy.com - http://www.yourcompany.com:8080/MicroStrategy/servlet/taskProc - https://tinyurl.com/ - https://www.microstrategy.com/us/report-a-security-vulnerability - https://medium.com/%40win3zz/simple-story-of-some-complicated-xss-on-faceboo
gy.com/us/report-a-security-vulnerability - https://medium.com/%40win3zz/simple-story-of-some-complicated-xss-on-facebook-8a9c0d80969d
CVE ID: CVE-2020-22987 State: PUBLISHED Published: 2022-05-12T19:58:03 Last Updated: 2024-08-04T14:51:10.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile task. Additional Analyst Notes: - CVE Program Container: References: - http://microstrategy.com - http://www.yourcompany.com:8080/MicroStrategy/servlet/taskProc - https://www.microstrategy.com/us/report-a-security-vulnerability - https://medium.com/%40win3zz/simple-story-of-some-complicated-xss-on-facebook-8a9c0d80969d
CVE ID: CVE-2020-23014 State: PUBLISHED Published: 2021-01-22T20:44:42 Last Updated: 2024-08-04T14:51:11.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: APfell 1.4 is vulnerable to authenticated reflected cross-site scripting (XSS) in /apiui/command_ through the payloadtypes_callback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/its-a-feature/Apfell/commit/5fc64502bc008388514f2b5d1160b677e3b4a7f3 - https://seekurity.com/blog/2020/04/19/admin/advisories/apfell-post-exploitation-red-team-framework-authenticated-cross-si
ttps://seekurity.com/blog/2020/04/19/admin/advisories/apfell-post-exploitation-red-team-framework-authenticated-cross-site-scripting-vulnerability
CVE ID: CVE-2020-23015 State: PUBLISHED Published: 2021-05-03T21:32:46 Last Updated: 2024-08-04T14:51:10.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opnsense/core/issues/4061
CVE ID: CVE-2020-23026 State: PUBLISHED Published: 2022-01-03T19:09:26 Last Updated: 2024-08-04T14:51:10.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://fossies.org/linux/privat/old/dhrystone-2.1.tar.gz/dhry_1.c
CVE ID: CVE-2020-23036 State: PUBLISHED Published: 2021-10-22T19:20:37 Last Updated: 2024-08-04T14:51:11.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the `password` authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to read the authentication credentials and follow-up requests containing the user password via a man in the middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php
tack. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2211 - https://cwe.mitre.org/data/definitions/522.html
CVE ID: CVE-2020-23037 State: PUBLISHED Published: 2021-10-22T19:20:38 Last Updated: 2024-08-04T14:51:11.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2198
CVE ID: CVE-2020-23038 State: PUBLISHED Published: 2021-10-22T19:20:39 Last Updated: 2024-08-04T14:51:11.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2205
CVE ID: CVE-2020-23039 State: PUBLISHED Published: 2021-10-22T19:20:40 Last Updated: 2024-08-04T14:51:10.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder function under the 'create' module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload as a path or folder name. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2210
CVE ID: CVE-2020-23040 State: PUBLISHED Published: 2021-10-22T19:20:40 Last Updated: 2024-08-04T14:58:13.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2207
CVE ID: CVE-2020-23041 State: PUBLISHED Published: 2021-10-22T19:20:35 Last Updated: 2024-08-04T14:58:13.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2204
CVE ID: CVE-2020-23042 State: PUBLISHED Published: 2021-10-22T19:20:35 Last Updated: 2024-08-04T14:58:14.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2201
CVE ID: CVE-2020-23043 State: PUBLISHED Published: 2021-10-22T19:20:34 Last Updated: 2024-08-04T14:58:13.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2212
CVE ID: CVE-2020-23044 State: PUBLISHED Published: 2021-10-22T19:20:33 Last Updated: 2024-08-04T14:58:13.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2195
CVE ID: CVE-2020-23045 State: PUBLISHED Published: 2021-10-22T19:20:33 Last Updated: 2024-08-04T14:58:13.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via the 'roleId' parameter of the `editRole` and `deletUser` modules. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2206
CVE ID: CVE-2020-23046 State: PUBLISHED Published: 2021-10-22T19:20:32 Last Updated: 2024-08-04T14:58:13.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename`, `mid`, `userid`, and `templet' parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2194
CVE ID: CVE-2020-23047 State: PUBLISHED Published: 2021-10-22T19:20:31 Last Updated: 2024-08-04T14:58:13.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting (XSS) vulnerability in the search input field of the search module. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2206
CVE ID: CVE-2020-23048 State: PUBLISHED Published: 2021-10-22T19:20:31 Last Updated: 2024-08-04T14:58:13.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component AddEvent.php via the name and comment parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2209
CVE ID: CVE-2020-23049 State: PUBLISHED Published: 2021-10-22T19:20:29 Last Updated: 2024-08-04T14:58:13.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `Displayname` field when using the `Add`, `Edit` or `Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2208
CVE ID: CVE-2020-23050 State: PUBLISHED Published: 2021-10-22T19:20:28 Last Updated: 2024-08-04T14:58:13.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFirstName parameter of the user account input field. This vulnerability allows attackers to execute phishing attacks, external redirects, and arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/79.html - https://www.vulnerability-lab.com/get_content.php?id=2215
CVE ID: CVE-2020-23051 State: PUBLISHED Published: 2021-10-22T19:20:28 Last Updated: 2024-08-04T14:58:13.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the firstname and lastname parameters of the registration form & loginsystem input fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2216
CVE ID: CVE-2020-23052 State: PUBLISHED Published: 2021-10-22T19:20:26 Last Updated: 2024-08-04T14:58:13.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component groupfiles.php via the Number (Nombre) and Description (Descripción) parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2217
CVE ID: CVE-2020-23054 State: PUBLISHED Published: 2021-10-22T19:20:24 Last Updated: 2024-08-04T14:58:13.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in NSK User Agent String Switcher Service v0.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the user agent input field. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2189
CVE ID: CVE-2020-23055 State: PUBLISHED Published: 2021-10-22T19:20:23 Last Updated: 2024-08-04T14:58:13.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the /authen/start/ module via the userid and password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2196
CVE ID: CVE-2020-23058 State: PUBLISHED Published: 2021-10-22T19:20:22 Last Updated: 2024-08-04T14:58:13.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2219 - https://cwe.mitre.org/data/definitions/287.html
CVE ID: CVE-2020-23060 State: PUBLISHED Published: 2021-10-22T19:20:20 Last Updated: 2024-08-04T14:58:13.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/121.html - https://www.vulnerability-lab.com/get_content.php?id=2236
CVE ID: CVE-2020-23061 State: PUBLISHED Published: 2021-10-22T19:20:21 Last Updated: 2024-08-04T14:58:13.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the `list` and `download` module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2200
CVE ID: CVE-2020-23064 State: REJECTED Published: 2023-06-26T00:00:00 Last Updated: 2024-05-15T16:18:40.267236 Description: No description available.
CVE ID: CVE-2020-23065 State: PUBLISHED Published: 2023-06-26T00:00:00.000Z Last Updated: 2025-02-13T16:27:40.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ezplatform.com/security-advisories/ezsa-2020-003-xss-in-demobundle-ezdemo-bundled-videojs
CVE ID: CVE-2020-23066 State: REJECTED Published: 2023-06-26T00:00:00 Last Updated: 2024-05-14T20:34:54.611280 Description: No description available.
CVE ID: CVE-2020-23069 State: PUBLISHED Published: 2021-08-18T16:16:49 Last Updated: 2024-08-04T14:58:14.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48312
CVE ID: CVE-2020-23079 State: PUBLISHED Published: 2021-07-12T16:29:30 Last Updated: 2024-08-04T14:58:14.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server intranet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/806
CVE ID: CVE-2020-23083 State: PUBLISHED Published: 2021-05-03T21:12:42 Last Updated: 2024-08-04T14:58:14.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhangdaiscott/jeecg/issues/56
CVE ID: CVE-2020-23109 State: PUBLISHED Published: 2021-11-03T16:07:03 Last Updated: 2024-08-04T14:58:14.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and disclose sensitive information, via a crafted HEIF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libheif/issues/207
CVE ID: CVE-2020-23126 State: PUBLISHED Published: 2021-11-03T16:06:42 Last Updated: 2024-08-04T14:58:14.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-42-2020-04-23-High-risk-low-impact-XSS-in-extended-users-profile-fields
CVE ID: CVE-2020-23127 State: PUBLISHED Published: 2021-05-05T21:50:43 Last Updated: 2024-08-04T14:58:13.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function by targeting an admin user. Additional Analyst Notes: - CVE Program Container: References: - https://toandak.blogspot.com/2020/05/csrf-vulnerbility-in-chamilo-lms.html - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-41-2020-04-22-Medium-risk-high-impact-CSRF-and-privilege-escalation-via-CSRF
CVE ID: CVE-2020-23128 State: PUBLISHED Published: 2021-05-05T21:55:40 Last Updated: 2024-08-04T14:58:14.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions administrator privilege to create a new user then use the edit user function to change this new user to administrator privilege. Additional Analyst Notes: - CVE Program Container: References: - https://toandak.blogspot.com/2020/05/improper-privilege-management-in.html - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-41-2020-04-22-Medium-risk-high-impact-CSRF-and-privilege-escalation-via-CSRF
CVE ID: CVE-2020-23129 State: REJECTED Published: 2021-11-07T15:31:29 Last Updated: 2021-11-07T15:31:29 Description: No description available.
CVE ID: CVE-2020-23130 State: REJECTED Published: 2021-11-07T15:28:55 Last Updated: 2021-11-07T15:28:55 Description: No description available.
CVE ID: CVE-2020-23136 State: PUBLISHED Published: 2020-11-09T17:02:41 Last Updated: 2024-08-04T14:58:13.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microweber v1.1.18 is affected by no session expiry after log-out. Additional Analyst Notes: - CVE Program Container: References: - http://microweber.com - https://gist.github.com/virendratiwari03/0b0d161e1141fdd74122abbb02fefe17
CVE ID: CVE-2020-23138 State: PUBLISHED Published: 2020-11-09T17:03:02 Last Updated: 2024-08-04T14:58:14.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unrestricted file upload vulnerability was discovered in the Microweber 1.1.18 admin account page. An attacker can upload PHP code or any extension (eg- .exe) to the web server by providing image data and the image/jpeg content type with a .php extension. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/virendratiwari03/0918aaba97eba31666630996ab3aeec3 - https://gist.github.com/virendratiwari03/800f96271f22c0c2f5aea126c7f1f170
CVE ID: CVE-2020-23139 State: PUBLISHED Published: 2020-11-09T17:03:24 Last Updated: 2024-08-04T14:58:13.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microweber 1.1.18 is affected by broken authentication and session management. Local session hijacking may occur, which could result in unauthorized access to system data or functionality, or a complete system compromise. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/virendratiwari03/9fdebe4d0b379d1996238b535add56d6