Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-29951 State: PUBLISHED Published: 2022-07-26T21:04:47 Last Updated: 2024-10-27T14:56:59.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on ports 1024-65534 on either TCP or UDP) for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing configuration settings. This protocol does not have any authentication features, allowing any attacker capable of communicating with the port in question to invoke (a subset of) desired functionality. Additional Analyst Notes: - CISA ADP Vuln
ating with the port in question to invoke (a subset of) desired functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-02
CVE ID: CVE-2022-29952 State: PUBLISHED Published: 2022-07-26T21:42:17 Last Updated: 2024-08-03T06:33:43.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration (BNMC) software. These protocols provide configuration management and historical data related functionality. Neither protocol has any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desi
ication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-188-02
CVE ID: CVE-2022-29953 State: PUBLISHED Published: 2022-07-26T21:42:30 Last Updated: 2024-08-03T06:33:43.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-188-02
CVE ID: CVE-2022-29957 State: PUBLISHED Published: 2022-07-26T21:14:50 Last Updated: 2024-08-03T06:33:43.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson DeltaV Distributed Control System (DCS) through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols include Firmware upgrade (18508/TCP, 18518/TCP); Plug-and-Play (18510/UDP); Hawk services (18507/UDP); Management (18519/TCP); Cold restart (18512/UDP); SIS communications (12345/TCP); and Wireless Gateway Protocol (18515/UDP). None of these protocols have any authentication features, allowing any attacker capable of communicating with
515/UDP). None of these protocols have any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
CVE ID: CVE-2022-29958 State: PUBLISHED Published: 2022-07-26T21:04:34 Last Updated: 2024-08-03T06:33:43.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the unauthenticated CMPLink/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. Control logic is downloaded to the PLC on a block-by-block basis with a given memory address and a blob of machine code. The logic that is downloaded to the PLC is not cryptographically authenticated, allowing an attacker to execute arbitrary machine code on the PLC's CPU module in the context of the runtime. In the case
llowing an attacker to execute arbitrary machine code on the PLC's CPU module in the context of the runtime. In the case of the PC10G-CPU, and likely for other CPU modules of the TOYOPUC family, a processor without MPU or MMU is used and this no memory protection or privilege-separation capabilities are available, giving an attacker full control over the CPU. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-02
CVE ID: CVE-2022-29959 State: PUBLISHED Published: 2022-08-16T12:23:42 Last Updated: 2024-08-03T06:33:43.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users are stored insecurely in the SecUsers.ini file by using a simple string transformation rather than a cryptographic mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://ww
mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-03
CVE ID: CVE-2022-29960 State: PUBLISHED Published: 2022-07-26T21:14:45 Last Updated: 2024-08-03T06:33:43.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. DES with hardcoded cryptographic keys is used for protection of certain system credentials, engineering files, and sensitive utilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03 - https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-03
CVE ID: CVE-2022-29962 State: PUBLISHED Published: 2022-07-26T21:14:40 Last Updated: 2024-08-03T06:33:43.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
CVE ID: CVE-2022-29963 State: PUBLISHED Published: 2022-07-26T21:14:35 Last Updated: 2024-08-03T06:33:43.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
CVE ID: CVE-2022-29964 State: PUBLISHED Published: 2022-07-26T21:14:35 Last Updated: 2024-08-03T06:33:43.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC SSH provides access to a shell as root, DeltaV, or backup via hardcoded credentials. NOTE: this is different from CVE-2014-2350. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
CVE ID: CVE-2022-29965 State: PUBLISHED Published: 2022-07-26T21:14:24 Last Updated: 2024-08-03T06:33:43.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on M-series and SIS (CSLS/LSNB/LSNG) nodes is controlled by means of utility passwords. These passwords are generated using a deterministic, insecure algorithm using a single seed value composed of a day/hour/minute timestamp with less than 16 bits of entropy. The seed value is fed through a lookup table and a series of permutation o
timestamp with less than 16 bits of entropy. The seed value is fed through a lookup table and a series of permutation operations resulting in three different four-character passwords corresponding to different privilege levels. An attacker can easily reconstruct these passwords and thus gain access to privileged maintenance operations. NOTE: this is different from CVE-2014-2350. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
CVE ID: CVE-2022-29967 State: PUBLISHED Published: 2022-04-29T22:34:16 Last Updated: 2024-08-03T06:40:46.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/babelouest/glewlwyd/commit/e3f7245c33897bf9b3a75acfcdb8b7b93974bf11
CVE ID: CVE-2022-29968 State: PUBLISHED Published: 2022-05-02T04:00:27 Last Updated: 2024-08-03T06:40:46.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/32452a3eb8b64e01e2be717f518c0be046975b9d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XA7UZ3HS73KXVYCIKN5ZDH7LLLGPUMOZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TLWTG3TWIMLNQEVTA3Z
/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TLWTG3TWIMLNQEVTA3ZQYVLLU2AJM3DY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU7MT7BPTA2NG24BTLZF5ZWYTLSO7BU3/ - https://security.netapp.com/advisory/ntap-20220715-0009/
CVE ID: CVE-2022-29969 State: PUBLISHED Published: 2022-05-02T04:18:27 Last Updated: 2024-08-03T06:40:46.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true). Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T307028 - https://gerrit.wikimedia.org/r/c/787807
CVE ID: CVE-2022-29970 State: PUBLISHED Published: 2022-05-02T00:00:00.000Z Last Updated: 2025-11-04T16:09:45.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sinatra/sinatra/pull/1683/commits/462c3ca1db53ed3cfc394cf5948e9c948ad1c10e - https://lists.debian.org/debian-lts-announce/2022/10/msg00034.html
CVE ID: CVE-2022-29971 State: PUBLISHED Published: 2022-05-09T17:14:59 Last Updated: 2024-08-03T06:40:46.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.magnitude.com/products/data-connectivity - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/ - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/
CVE ID: CVE-2022-29972 State: PUBLISHED Published: 2022-05-09T17:15:04 Last Updated: 2024-08-03T06:40:46.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.magnitude.com/products/data-connectivity - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/ - https://insightsoftware.com/trust/security/advisories/redshift
ty/advisories/redshift-and-athena-driver-vulnerability/ - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/
CVE ID: CVE-2022-29973 State: PUBLISHED Published: 2022-05-02T05:09:22 Last Updated: 2024-08-03T06:40:46.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: relan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in the filesystem) in certain situations involving offsets beyond ValidDataLength. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/relan/exfat/issues/185
CVE ID: CVE-2022-29974 State: PUBLISHED Published: 2024-12-09T00:00:00 Last Updated: 2024-12-12T16:52:06.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow. This driver is, for example, used in certain ASUS devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ami.com - https://dfir.ru/2024/12/09/multiple-vulnerabilities-in-ami-file-system-drivers/
CVE ID: CVE-2022-29975 State: PUBLISHED Published: 2022-05-11T12:53:23 Last Updated: 2024-08-03T06:40:46.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/haxpunk1337/MDaemon-/blob/main/MDaemon%20XSS%20at%20CC%20endpoint
CVE ID: CVE-2022-29976 State: PUBLISHED Published: 2022-05-11T12:54:14 Last Updated: 2024-08-03T06:40:46.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/haxpunk1337/MDaemon-/blob/main/MDaemon%20XSS%20at%20BCC%20endpoint
CVE ID: CVE-2022-29977 State: PUBLISHED Published: 2022-05-11T13:10:13 Last Updated: 2024-08-03T06:40:46.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/165
CVE ID: CVE-2022-29978 State: PUBLISHED Published: 2022-05-11T13:12:05 Last Updated: 2024-08-03T06:40:47.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/166
CVE ID: CVE-2022-29979 State: PUBLISHED Published: 2022-05-12T14:15:44 Last Updated: 2024-08-03T06:40:46.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-6.md
CVE ID: CVE-2022-29980 State: PUBLISHED Published: 2022-05-12T14:14:23 Last Updated: 2024-08-03T06:40:47.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-7.md
CVE ID: CVE-2022-29981 State: PUBLISHED Published: 2022-05-12T14:22:43 Last Updated: 2024-08-03T06:40:47.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-8.md
CVE ID: CVE-2022-29982 State: PUBLISHED Published: 2022-05-12T14:10:53 Last Updated: 2024-08-03T06:40:47.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-9.md
CVE ID: CVE-2022-29983 State: PUBLISHED Published: 2022-05-12T14:09:21 Last Updated: 2024-08-03T06:40:46.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-10.md
CVE ID: CVE-2022-29984 State: PUBLISHED Published: 2022-05-12T14:06:46 Last Updated: 2024-08-03T06:40:46.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/simple-client-management-system/SQLi-11.md
CVE ID: CVE-2022-29985 State: PUBLISHED Published: 2022-05-12T15:01:42 Last Updated: 2024-08-03T06:40:46.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-1.md
CVE ID: CVE-2022-29986 State: PUBLISHED Published: 2022-05-12T15:00:32 Last Updated: 2024-08-03T06:40:47.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-2.md
CVE ID: CVE-2022-29987 State: PUBLISHED Published: 2022-05-12T14:59:05 Last Updated: 2024-08-03T06:40:47.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-5.md
CVE ID: CVE-2022-29988 State: PUBLISHED Published: 2022-05-12T14:57:53 Last Updated: 2024-08-03T06:40:46.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-4.md
CVE ID: CVE-2022-29989 State: PUBLISHED Published: 2022-05-12T14:56:39 Last Updated: 2024-08-03T06:40:47.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-3.md
CVE ID: CVE-2022-29990 State: PUBLISHED Published: 2022-05-12T14:55:26 Last Updated: 2024-08-03T06:40:47.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-6.md
CVE ID: CVE-2022-29992 State: PUBLISHED Published: 2022-05-12T14:51:27 Last Updated: 2024-08-03T06:40:47.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQli-7.md
CVE ID: CVE-2022-29993 State: PUBLISHED Published: 2022-05-12T14:48:52 Last Updated: 2024-08-03T06:40:47.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-8.md
CVE ID: CVE-2022-29994 State: PUBLISHED Published: 2022-05-12T14:46:53 Last Updated: 2024-08-03T06:40:47.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-10.md
CVE ID: CVE-2022-29995 State: PUBLISHED Published: 2022-05-12T14:45:40 Last Updated: 2024-08-03T06:40:47.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-9.md
CVE ID: CVE-2022-29998 State: PUBLISHED Published: 2022-05-12T15:18:26 Last Updated: 2024-08-03T06:40:46.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-1.md
CVE ID: CVE-2022-29999 State: PUBLISHED Published: 2022-05-12T15:17:19 Last Updated: 2024-08-03T06:40:47.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?client_id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-2.md