Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-42029 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T20:36:42.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-95-2022-09-14-High-impact-Moderate-risk-Authenticated-Local-file-inclusion
CVE ID: CVE-2022-42034 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T13:35:54.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/debug601/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md
CVE ID: CVE-2022-42036 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:56:39.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/d8s-urls/ - https://pypi.org/project/democritus-csv/ - https://github.com/democritus-project/d8s-urls/issues/12
CVE ID: CVE-2022-42037 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T13:31:36.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-asns/ - https://pypi.org/project/democritus-csv/ - https://github.com/democritus-project/d8s-asns/issues/9
CVE ID: CVE-2022-42038 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:38:25.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-ip-addresses/ - https://pypi.org/project/democritus-csv/ - https://github.com/democritus-project/d8s-ip-addresses/issues/14
CVE ID: CVE-2022-42039 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:39:40.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-lists/ - https://pypi.org/project/democritus-dicts/ - https://github.com/democritus-project/d8s-lists/issues/18
CVE ID: CVE-2022-42040 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:40:38.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/democritus-dicts/ - https://pypi.org/project/d8s-algorithms/ - https://github.com/dadadadada111/info/issues/1
CVE ID: CVE-2022-42041 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:41:50.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-file-system/ - https://pypi.org/project/democritus-hashes/ - https://github.com/dadadadada111/info/issues/2
CVE ID: CVE-2022-42042 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:43:06.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/democritus-hashes/ - https://pypi.org/project/d8s-networking/ - https://github.com/dadadadada111/info/issues/3
CVE ID: CVE-2022-42043 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:44:08.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-xml/ - https://pypi.org/project/democritus-html/ - https://github.com/dadadadada111/info/issues/5
CVE ID: CVE-2022-42044 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:45:01.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-asns/ - https://pypi.org/project/democritus-html/ - https://github.com/dadadadada111/info/issues/4
CVE ID: CVE-2022-42045 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-11-05T20:02:11.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zemana AntiMalware 3.2.28. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ReCryptLLC/CVE-2022-42045/tree/main
CVE ID: CVE-2022-42046 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-17T13:49:47.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to perform local privilege escalation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wfs.games/news/20221220_01.html - https://github.com/kkent030315/CVE-2022-42046
CVE ID: CVE-2022-42053 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:43:16.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the PortMappingServer parameter in the setPortMapping function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/tenda_ac1200_router/
CVE ID: CVE-2022-42054 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-07T16:19:59.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored cross-site scripting (XSS) vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Company Name and Description text fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/glinet-router
CVE ID: CVE-2022-42055 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-07T13:28:52.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/glinet-router
CVE ID: CVE-2022-42058 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:41:46.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/tenda_ac1200_router/ - https://boschko.ca/tenda_ac1200_router
CVE ID: CVE-2022-42060 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-05-13T19:28:25.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/tenda_ac1200_router/ - https://boschko.ca/tenda_ac1200_router
CVE ID: CVE-2022-42064 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:31:20.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/168498/Online-Diagnostic-Lab-Management-System-1.0-SQL-Injection-Shell-Upload.html
CVE ID: CVE-2022-42066 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:29:46.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/168549/Online-Examination-System-1.0-Cross-Site-Scripting.html - https://projectworlds.in/free-projects/php-projects/online-examination/
CVE ID: CVE-2022-42067 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:24:19.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/168524/Online-Birth-Certificate-Management-System-1.0-Insecure-Direct-Object-Reference.html - https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.html
CVE ID: CVE-2022-42069 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:22:08.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.html - https://packetstormsecurity.com/files/168529/Online-Birth-Certificate-Management-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2022-42070 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:20:49.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.html - https://packetstormsecurity.com/files/168522/Online-Birth-Certificate-Management-System-1.0-Cross-Site-Request-Forgery.html
CVE ID: CVE-2022-42071 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:27:58.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.html - https://packetstormsecurity.com/files/168533/Online-Birth-Certificate-Management-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2022-42073 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T13:03:44.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/f0w4rD/bug_report/blob/main/vendors/mayuri_k/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-42074 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T13:03:45.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/f0w4rD/bug_report/blob/main/vendors/mayuri_k/online-diagnostic-lab-management-system/SQLi-2.md
CVE ID: CVE-2022-42075 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T13:03:45.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Planner v1.0 is vulnerable to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.github.com - https://github.com/f0w4rD/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md
CVE ID: CVE-2022-42077 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:23:45.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/AC1206/AC1206-1.md
CVE ID: CVE-2022-42078 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:18:12.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/AC1206/AC1206-2.md
CVE ID: CVE-2022-42079 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:12:37.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/AC1206/AC1206-3.md
CVE ID: CVE-2022-42080 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:10:54.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/AC1206/AC1206-4.md
CVE ID: CVE-2022-42081 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T15:36:42.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via sched_end_time parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/AC1206/AC1206-5.md
CVE ID: CVE-2022-42086 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T15:38:08.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function TendaAteMode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/AX1803/AX1803-2.md
CVE ID: CVE-2022-42087 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:03:58.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianhui999/myCVE/blob/main/AX1803/AX1803-1.md
CVE ID: CVE-2022-42092 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T13:03:44.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required. Additional Analyst Notes: - CVE Program Container: References: - https://grimthereaperteam.medium.com/backdrop-cms-1-22-0-unrestricted-file-upload-themes-ad42a599561c
CVE ID: CVE-2022-42094 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T15:00:22.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/backdrop/backdrop/releases/tag/1.23.0 - https://backdropcms.org - https://grimthereaperteam.medium.com/cve-2022-42094-backdrop-xss-at-cards-84266b5250f1 - https://github.com/bypazs/CVE-2022-42094
CVE ID: CVE-2022-42095 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T18:08:47.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/backdrop/backdrop/releases/tag/1.23.0 - https://backdropcms.org - https://grimthereaperteam.medium.com/declined-backdrop-xss-at-pages-26e5d63686bc - https://github.com/bypazs/Declined_backdrop-XSS-at-pAGES - https://github.com/bypazs/CVE-2022-42095
CVE ID: CVE-2022-42096 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T19:59:24.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/backdrop/backdrop/releases/tag/1.23.0 - https://backdropcms.org - https://github.com/bypazs/CVE-2022-42096 - https://grimthereaperteam.medium.com/cve-2022-42096-backdrop-xss-at-posts-437c305036e2
CVE ID: CVE-2022-42097 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T14:57:48.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/backdrop/backdrop/releases/tag/1.23.0 - https://backdropcms.org - https://grimthereaperteam.medium.com/cve-2022-42097-backdrop-xss-at-comments-2ea536ec55e1 - https://github.com/bypazs/CVE-2022-42097
CVE ID: CVE-2022-42098 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T04:22:19.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/msaad1999/KLiK-SocialMediaWebsite/releases/tag/v1.0.1 - https://github.com/msaad1999/KLiK-SocialMediaWebsite - https://github.com/bypazs/CVE-2022-42098 - https://grimthereaperteam.medium.com/cve-2022-42098-klik-sql-injection-6a9299621789
CVE ID: CVE-2022-42099 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T17:19:10.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subject input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/msaad1999/KLiK-SocialMediaWebsite/releases/tag/v1.0.1 - https://grimthereaperteam.medium.com/klik-socialmediawebsite-version-1-0-1-stored-xss-vulnerability-at-forum-subject-a453789736f2
CVE ID: CVE-2022-42100 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T16:56:05.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/msaad1999/KLiK-SocialMediaWebsite/releases/tag/v1.0.1 - https://grimthereaperteam.medium.com/klik-socialmediawebsite-version-1-0-1-stored-xss-vulnerability-at-reply-form-b189147c1f93
CVE ID: CVE-2022-42109 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T16:51:02.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PuneethReddyHC/online-shopping-system-advanced - https://medium.com/%40grimthereaperteam/online-shopping-system-advanced-sql-injection-at-product-php-c55c435c35c2
CVE ID: CVE-2022-42110 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T18:52:45.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42110 - https://issues.liferay.com/browse/LPE-17403