Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1567 State: PUBLISHED Published: 2023-03-22T13:31:05.743Z Last Updated: 2025-02-14T16:12:18.223Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Student Study Center Desk Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/assign/assign.php. The manipulation of the argument sid leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability
remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223559. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223559 - https://vuldb.com/?ctiid.223559 - https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun1.pdf
CVE ID: CVE-2023-1568 State: PUBLISHED Published: 2023-03-22T14:00:05.373Z Last Updated: 2024-08-02T05:49:11.696Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Student Study Center Desk Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file /admin/reports/index.php of the component GET Parameter Handler. The manipulation of the argument date_to leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identi
. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223560. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.223560 - https://vuldb.com/?ctiid.223560 - https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun2.pdf
CVE ID: CVE-2023-1569 State: PUBLISHED Published: 2023-03-22T14:00:06.504Z Last Updated: 2024-08-02T05:49:11.678Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: E-Commerce System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument U_NAME with the input <script>alert('1')</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223561 was ass
an be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223561 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223561 - https://vuldb.com/?ctiid.223561
CVE ID: CVE-2023-1570 State: PUBLISHED Published: 2023-03-22T14:31:03.821Z Last Updated: 2024-08-02T05:49:11.694Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: syoyo Products: tinydng Problem Types: CWE-122 Description: A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function __interceptor_memcpy of the file tiny_dng_loader.h. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of aff
and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. It is recommended to apply a patch to fix this issue. VDB-223562 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223562 - https://vuldb.com/?ctiid.223562 - https://github.com/syoyo/tinydng/issues/28 - https://github.com/syoyo/tinydng/issues/29 - https://github.com/10cksYiqiyinHangzhouTechnology/tinydngSecurityIssueReport1
CVE ID: CVE-2023-1571 State: PUBLISHED Published: 2023-03-22T15:00:05.220Z Last Updated: 2024-08-02T05:49:11.689Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: DataGear Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0. This affects an unknown part of the file /analysisProject/pagingQueryData. The manipulation of the argument queryOrder leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.1 is able to address this issue. It is recommended to upgrade the affected component. The associated id
g to version 4.5.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-223563. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223563 - https://vuldb.com/?ctiid.223563 - https://github.com/yangyanglo/ForCVE/blob/main/2023-0x01.md
CVE ID: CVE-2023-1572 State: PUBLISHED Published: 2023-03-22T12:00:51.903Z Last Updated: 2025-02-25T20:59:18.418Z Severity: LOW (CVSS 2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: DataGear Problem Types: CWE-79 Description: A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic. This vulnerability affects unknown code of the component Plugin Handler. The manipulation leads to cross site scripting. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier
ing to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-223564. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223564 - https://vuldb.com/?ctiid.223564 - https://github.com/yangyanglo/ForCVE/edit/main/2023-0x03.md - https://github.com/yangyanglo/ForCVE/blob/main/2023-0x03.md - https://github.com/datageartech/datagear/releases/tag/v1.12.0
CVE ID: CVE-2023-1573 State: PUBLISHED Published: 2023-03-22T15:31:05.188Z Last Updated: 2024-08-02T05:49:11.693Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: DataGear Problem Types: CWE-79 Description: A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-223565 was assigned to th
to address this issue. It is recommended to upgrade the affected component. The identifier VDB-223565 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223565 - https://vuldb.com/?ctiid.223565 - https://github.com/yangyanglo/ForCVE/blob/main/2023-0x04.md - https://github.com/datageartech/datagear/releases/tag/v1.12.0
CVE ID: CVE-2023-1574 State: PUBLISHED Published: 2023-03-22T12:50:16.949Z Last Updated: 2025-02-25T20:56:29.119Z Vendors: Devolutions Products: Remote Desktop Manager Problem Types: n/a Description: Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1.9 and below on Windows allows an attacker with access to the user interface to obtain sensitive information via the error message dialog that displays the password in clear text. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0006
CVE ID: CVE-2023-1575 State: PUBLISHED Published: 2023-03-29T14:19:22.627Z Last Updated: 2025-01-13T16:56:48.968Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: MegaMain Products: Mega Main Menu Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Mega Main Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scrip
s it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a44ce6a3-0a9d-4bce-9251-f3a38b000645?source=cve - https://codecanyon.net/item/mega-main-menu-wordpress-menu-plugin/6135125
CVE ID: CVE-2023-1576 State: REJECTED Published: 2023-09-14T17:42:50.029Z Last Updated: 2023-09-15T20:52:44.452Z Description: No description available.
CVE ID: CVE-2023-1577 State: PUBLISHED Published: 2024-07-31T20:29:31.733Z Last Updated: 2024-08-01T19:35:25.372Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Driver Manager Problem Types: CWE-20 Description: A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a local user to execute code with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/dc_415202.html
CVE ID: CVE-2023-1578 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-25T19:52:13.960Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-89 Description: SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e - https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2
CVE ID: CVE-2023-1579 State: PUBLISHED Published: 2023-04-03T00:00:00.000Z Last Updated: 2025-02-13T14:56:49.974Z Vendors: n/a Products: binutils Problem Types: CWE-119 Description: Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29988 - https://security.netapp.com/advisory/ntap-20230511-0009/ - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=11d171f1910b508a81d21faa087ad1af573407d8 - https://security.gentoo.org/glsa/202309-15
CVE ID: CVE-2023-1580 State: PUBLISHED Published: 2023-03-22T17:49:11.291Z Last Updated: 2025-02-25T20:54:41.619Z Vendors: Devolutions Products: Gateway Problem Types: n/a Description: Uncontrolled resource consumption in the logging feature in Devolutions Gateway 2023.1.1 and earlier allows an attacker to cause a denial of service by filling up the disk and render the system unusable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0007
CVE ID: CVE-2023-1582 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-13T15:00:33.996Z Vendors: n/a Products: Linux Problem Types: CWE-362 Description: A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/linux-mm/Yg6ac8WlwtnDH6M0%40kroah.com/
CVE ID: CVE-2023-1583 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-20T18:50:07.985Z Vendors: n/a Products: Linux kernel Problem Types: CWE-476 Description: A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} and alloc_hint) is not cleared. A subsequent request that has auto index selection enabled via IORING_FILE_INDEX_ALLOC can cause a NULL pointer dereference. An unprivileged user can use the flaw to cause a system crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
r can use the flaw to cause a system crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux-block.git/commit/?h=io_uring-6.3&id=761efd55a0227aca3a69deacdaa112fffd44fe37 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=02a4d923e4400a36d340ea12d8058f69ebf3a383
CVE ID: CVE-2023-1584 State: PUBLISHED Published: 2023-10-04T10:47:37.831Z Last Updated: 2024-08-02T05:57:23.278Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat build of Quarkus 2.13.8.Final, RHINT Service Registry 2.5.4 GA Problem Types: CWE-200 Description: A flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an insecure HTTP protocol is used, which can allow attackers to access sensitive user data directly from the ID token or by using the access token to access user data from OIDC provider services. Please note that passwords are not stored in access tokens. Additional A
o access user data from OIDC provider services. Please note that passwords are not stored in access tokens. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:3809 - https://access.redhat.com/errata/RHSA-2023:7653 - https://access.redhat.com/security/cve/CVE-2023-1584 - https://bugzilla.redhat.com/show_bug.cgi?id=2180886 - https://github.com/quarkusio/quarkus/pull/32192 - https://github.com/quarkusio/quarkus/pull/33414
CVE ID: CVE-2023-1585 State: PUBLISHED Published: 2023-04-19T18:27:57.763Z Last Updated: 2025-02-05T14:44:52.972Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: Avast, AVG Products: Avast Antivirus, AVG Antivirus Problem Types: CWE-367 Description: Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.norton.com/sp
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE ID: CVE-2023-1586 State: PUBLISHED Published: 2023-04-19T18:35:09.013Z Last Updated: 2025-02-05T16:16:16.966Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: Avast, AVG Products: Avast Antivirus, AVG Antivirus Problem Types: CWE-367 Description: Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE ID: CVE-2023-1587 State: PUBLISHED Published: 2023-04-19T18:39:52.636Z Last Updated: 2025-02-05T16:15:12.012Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: AVAST, AVG Products: Avast Antivirus, AVG Antivirus Problem Types: CWE-476 Description: Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE ID: CVE-2023-1588 State: REJECTED Published: N/A Last Updated: 2023-05-25T07:29:33.047Z Description: No description available.
CVE ID: CVE-2023-1589 State: PUBLISHED Published: 2023-03-23T08:00:05.877Z Last Updated: 2025-02-19T20:59:52.316Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This vulnerability affects the function exec of the file admin/operations/approve_delete.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-223654 is the identifier assigned to this vu
remotely. The exploit has been disclosed to the public and may be used. VDB-223654 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223654 - https://vuldb.com/?ctiid.223654 - https://blog.csdn.net/weixin_43864034/article/details/129729911
CVE ID: CVE-2023-1590 State: PUBLISHED Published: 2023-03-23T08:00:07.323Z Last Updated: 2024-08-02T05:57:23.329Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223655. Addi
it has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223655. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223655 - https://vuldb.com/?ctiid.223655 - https://blog.csdn.net/weixin_43864034/article/details/129730106
CVE ID: CVE-2023-1591 State: PUBLISHED Published: 2023-03-23T09:00:07.175Z Last Updated: 2024-08-02T05:57:23.320Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Automatic Question Paper Generator System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. This affects an unknown part of the file classes/Users.php?f=save_ruser. The manipulation of the argument id/email leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223659. Additional Analyst Notes: - CVE Program Container: Ref
y. The associated identifier of this vulnerability is VDB-223659. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223659 - https://vuldb.com/?ctiid.223659
CVE ID: CVE-2023-1592 State: PUBLISHED Published: 2023-03-23T09:31:03.883Z Last Updated: 2024-11-22T17:08:22.839Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Automatic Question Paper Generator System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file admin/courses/view_class.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-223660. Additional Analyst Notes: - CVE Progra
ck can be initiated remotely. The identifier of this vulnerability is VDB-223660. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223660 - https://vuldb.com/?ctiid.223660
CVE ID: CVE-2023-1593 State: PUBLISHED Published: 2023-03-23T10:00:04.927Z Last Updated: 2024-08-02T05:57:25.007Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Automatic Question Paper Generator System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generator System 1.0. This issue affects some unknown processing of the file classes/Master.php?f=save_class. The manipulation of the argument description leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-223661 was assigned to this vulnerability. Additional Analyst Notes: -
ack may be initiated remotely. The identifier VDB-223661 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223661 - https://vuldb.com/?ctiid.223661
CVE ID: CVE-2023-1594 State: PUBLISHED Published: 2023-03-23T10:00:06.079Z Last Updated: 2024-11-22T17:07:33.511Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: novel-plus Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223662 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223662 - https://vuldb.com/?ctiid.223662 - https://github.com/OYyunshen/Poc/blob/main/Novel-PlusV3.6.2Sqli.pdf
CVE ID: CVE-2023-1595 State: PUBLISHED Published: 2023-03-23T10:31:03.971Z Last Updated: 2024-08-02T05:57:23.318Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: novel-plus Problem Types: CWE-89 Description: A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223663. Additional Analyst Notes: - CVE Program Container: References: - https://v
entifier of this vulnerability is VDB-223663. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223663 - https://vuldb.com/?ctiid.223663 - https://github.com/1610349395/novel-plus-v3.6.2----Background-SQL-Injection-Vulnerability-/blob/main/novel-plus%20v3.6.2%20--%20Background%20SQL%20Injection%20Vulnerability.md