Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6169 State: PUBLISHED Published: 2024-07-09T04:32:56.460Z Last Updated: 2024-08-01T21:33:04.976Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: unitecms Products: Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all versions up to, and including, 1.5.112 due to insufficient input sanitization and output escaping. This makes it possible for
ons up to, and including, 1.5.112 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above and granted plugin setting edit permissions by an administrator, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f2f11c32-d58e-4ac8-83c7-30927a626e10?source=cve - https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/framework/instagram/helper.class.php#L168 - https://plugins
s.org/browser/unlimited-elements-for-elementor/trunk/inc_php/framework/instagram/helper.class.php#L168 - https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/framework/instagram/helper.class.php#L178 - https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/framework/instagram/helper.class.php#L182 - https://github.com/hakluke/weaponised-XSS-payloads/blob/master/wordpress_create_admin_user.js - https://plugins.trac.wordpress.org/changeset/3112307/
CVE ID: CVE-2024-6170 State: PUBLISHED Published: 2024-07-09T04:32:55.990Z Last Updated: 2024-08-01T21:33:04.892Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: unitecms Products: Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘email’ parameter in all versions up to, and including, 1.5.112 due to insufficient input sanitization and output escaping. This makes it possible for au
up to, and including, 1.5.112 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/db14b141-521b-464d-a638-2228b1a86c2b?source=cve - https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/unitecreator_settings_output.class.php#L398 - https://github.com/hakluke/weaponised-XSS-payloads/blob/master/wordpress_create_
reator_settings_output.class.php#L398 - https://github.com/hakluke/weaponised-XSS-payloads/blob/master/wordpress_create_admin_user.js - https://plugins.trac.wordpress.org/changeset/3112307/
CVE ID: CVE-2024-6171 State: PUBLISHED Published: 2024-07-09T04:32:53.083Z Last Updated: 2024-08-01T21:33:04.694Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: unitecms Products: Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Problem Types: CWE-348 Use of Less Trusted Source Description: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 1.5.112 due to insufficient IP address validation and/or use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to byp
-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to bypass antispam functionality in the Form Builder widgets. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/714acd7d-6d19-4087-bb27-b9a4ccbb678b?source=cve - https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/unitecreator_form.class.php#L742 - https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/framework/functions.class.php#L3407 - https://plugins.trac.wordpress.org/changeset/3112307/
CVE ID: CVE-2024-6172 State: PUBLISHED Published: 2024-07-02T06:49:42.989Z Last Updated: 2024-08-01T21:33:05.052Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: icegram Products: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.25 due to insuffic
vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.25 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/13629598-d45d-4ff5-aeb5-6ac881d25183?source=cve - https://plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/includes/db/class-
eb5-6ac881d25183?source=cve - https://plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/includes/db/class-es-db-contacts.php#L834 - https://plugins.trac.wordpress.org/changeset/3107964/email-subscribers#file4 - https://wordpress.org/plugins/email-subscribers/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3107964%40email-subscribers%2Ftrunk&old=3104864%40email-subscribers%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-6173 State: PUBLISHED Published: 2024-09-10T05:03:35.854Z Last Updated: 2024-11-29T05:33:10.464Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-1286 Description: 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API parameter allowed the use of arbitrary values allowing for an attacker to block access to the guard tour configuration page in the web interface of the Axis device. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes:
ighlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/5a/87/a2/cve-2024-6173-en-US-458042.pdf
CVE ID: CVE-2024-6174 State: PUBLISHED Published: 2025-06-26T09:15:25.462Z Last Updated: 2025-06-26T17:38:50.843Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Canonical Products: cloud-init Description: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/canonical/cloud-init/releases/tag/25.1.3
CVE ID: CVE-2024-6175 State: PUBLISHED Published: 2024-07-18T02:03:53.151Z Last Updated: 2024-08-01T21:33:04.999Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: deetronix Products: Booking Ultra Pro Appointments Booking Calendar Plugin Problem Types: CWE-862 Missing Authorization Description: The Booking Ultra Pro Appointments Booking Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the multiple functions in all versions up to, and including, 1.1.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify and delete. multiple plugin opti
possible for authenticated attackers, with Subscriber-level access and above, to modify and delete. multiple plugin options and data such as payments, pricing, booking information, business hours, calendars, profile information, and email templates. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0594ed62-0a41-4819-89b8-ea31afbcac73?source=cve - https://wordpress.org/plugins/booking-ultra-pro/#description
CVE ID: CVE-2024-6176 State: PUBLISHED Published: 2024-06-20T00:44:15.630Z Last Updated: 2024-08-01T21:33:05.071Z Vendors: LG Electronics Products: LG SuperSign CMS Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS: from 4.1.3 before < 4.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE ID: CVE-2024-6177 State: PUBLISHED Published: 2024-06-20T00:52:25.226Z Last Updated: 2024-08-01T21:33:05.223Z Vendors: LG Electronics Products: SuperSign CMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE ID: CVE-2024-6178 State: PUBLISHED Published: 2024-06-20T01:51:50.425Z Last Updated: 2024-08-01T21:33:05.057Z Vendors: LG Electronics Products: SuperSign CMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE ID: CVE-2024-6179 State: PUBLISHED Published: 2024-06-20T01:53:11.588Z Last Updated: 2024-08-01T21:33:05.098Z Vendors: LG Electronics Products: SuperSign CMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE ID: CVE-2024-6180 State: PUBLISHED Published: 2024-07-09T07:38:43.367Z Last Updated: 2024-08-01T21:33:05.069Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: ashanjay Products: EventON Problem Types: CWE-862 Missing Authorization Description: The EventON plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eventon_import_settings' ajax action in all versions up to, and including, 2.2.15. This makes it possible for unauthenticated attackers to update plugin settings, including adding stored cross-site scripting to settings options displayed on event calendar pages. Additional Analyst Notes: - CISA
ding stored cross-site scripting to settings options displayed on event calendar pages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/12f3dc64-322d-4015-8c57-eaa41c9a1829?source=cve - https://plugins.trac.wordpress.org/browser/eventon-lite/trunk/assets/js/admin/wp_admin.js#L714 - https://plugins.trac.wordpress.org/browser/eventon-lite/trunk/includes/calendar/class-calendar-event-structure.php#L590
CVE ID: CVE-2024-6181 State: PUBLISHED Published: 2024-06-20T11:00:05.666Z Last Updated: 2024-08-01T21:33:05.040Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: LabVantage Products: LIMS Problem Types: CWE-79 Description: A vulnerability was found in LabVantage LIMS 2017. It has been declared as problematic. This vulnerability affects unknown code of the file /labvantage/rc?command=file&file=WEB-CORE/elements/files/filesembedded.jsp&size=32. The manipulation of the argument height/width leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269152. NOTE: The ven
loit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269152. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269152 - https://vuldb.com/?ctiid.269152 - https://vuldb.com/?submit.353709 - https://gentle-khaan-c53.notion.site/Reflected-XSS-in-Labvantage-LIMS-9531d77dce984d4da2ddcab863962e9c?pvs=4
CVE ID: CVE-2024-6182 State: PUBLISHED Published: 2024-06-20T11:00:07.345Z Last Updated: 2024-08-01T21:33:04.898Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: LabVantage Products: LIMS Problem Types: CWE-79 Description: A vulnerability was found in LabVantage LIMS 2017. It has been rated as problematic. This issue affects some unknown processing of the file /labvantage/rc?command=page&page=LV_ViewSampleSpec&oosonly=Y&_sdialog=Y. The manipulation of the argument sdcid/keyid1 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269153 was assigned to this vulnerability. NOTE: The vend
en disclosed to the public and may be used. The identifier VDB-269153 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269153 - https://vuldb.com/?ctiid.269153 - https://vuldb.com/?submit.354361 - https://gentle-khaan-c53.notion.site/Reflected-XSS-in-Labvantage-LIMS-95e338b6f9ea45db9a6c635c3c1ff3b8
CVE ID: CVE-2024-6183 State: PUBLISHED Published: 2024-06-20T11:31:03.910Z Last Updated: 2024-08-01T21:33:05.179Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: EZ-Suite Products: EZ-Partner Problem Types: CWE-80 Description: A vulnerability classified as problematic has been found in EZ-Suite EZ-Partner 5. Affected is an unknown function of the component Forgot Password Handler. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. VDB-269154 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: -
tacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269154 - https://vuldb.com/?ctiid.269154 - https://vuldb.com/?submit.353713
CVE ID: CVE-2024-6184 State: PUBLISHED Published: 2024-06-20T11:31:05.291Z Last Updated: 2024-08-01T21:33:04.918Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ruijie Products: RG-UAC Problem Types: CWE-78 Description: A vulnerability classified as critical was found in Ruijie RG-UAC 1.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/reboot/reboot_commit.php. The manipulation of the argument servicename leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269155. NOTE: The vendor was contacted early abou
nd may be used. The associated identifier of this vulnerability is VDB-269155. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269155 - https://vuldb.com/?ctiid.269155 - https://vuldb.com/?submit.354119 - https://github.com/L1OudFd8cl09/CVE/blob/main/11_06_2024_a.md
CVE ID: CVE-2024-6185 State: PUBLISHED Published: 2024-06-20T12:00:04.745Z Last Updated: 2024-08-01T21:33:05.031Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ruijie Products: RG-UAC Problem Types: CWE-78 Description: A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC 1.0. Affected by this issue is the function get_ip_addr_details of the file /view/dhcp/dhcpConfig/commit.php. The manipulation of the argument ethname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269156. NOTE: The vendor was contacted early about this di
and may be used. The identifier of this vulnerability is VDB-269156. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269156 - https://vuldb.com/?ctiid.269156 - https://vuldb.com/?submit.354121 - https://github.com/L1OudFd8cl09/CVE/blob/main/11_06_2024_b.md
CVE ID: CVE-2024-6186 State: PUBLISHED Published: 2024-06-20T12:31:03.546Z Last Updated: 2024-08-01T21:33:05.321Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ruijie Products: RG-UAC Problem Types: CWE-78 Description: A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the file /view/userAuthentication/SSO/commit.php. The manipulation of the argument ad_log_name leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269157 was assigned to this vulnerability. NOTE: The vendor was contacted early about this discl
sed. The identifier VDB-269157 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269157 - https://vuldb.com/?ctiid.269157 - https://vuldb.com/?submit.354122 - https://github.com/L1OudFd8cl09/CVE/blob/main/11_06_2024_c.md
CVE ID: CVE-2024-6187 State: PUBLISHED Published: 2024-06-20T13:00:05.580Z Last Updated: 2024-08-01T21:33:05.033Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ruijie Products: RG-UAC Problem Types: CWE-78 Description: A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/vpn/autovpn/sub_commit.php. The manipulation of the argument key leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-269158 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not
s the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269158 - https://vuldb.com/?ctiid.269158 - https://vuldb.com/?submit.354125 - https://github.com/L1OudFd8cl09/CVE/blob/main/11_06_2024_d.md
CVE ID: CVE-2024-6188 State: PUBLISHED Published: 2024-06-20T13:31:04.603Z Last Updated: 2024-08-01T21:33:05.035Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Parsec Automation Products: TrackSYS Problem Types: CWE-425 Description: A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269159. NOTE: The vendor was contacted
e public and may be used. The associated identifier of this vulnerability is VDB-269159. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269159 - https://vuldb.com/?ctiid.269159 - https://vuldb.com/?submit.354924 - https://kiwiyumi.com/post/tracksys-export-source-code/
CVE ID: CVE-2024-6189 State: PUBLISHED Published: 2024-06-20T14:00:05.817Z Last Updated: 2024-08-01T21:33:05.173Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: A301 Problem Types: CWE-121 Description: A vulnerability was found in Tenda A301 15.13.08.12. It has been classified as critical. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269160. NOTE: The vendor was contacted early about this disclos
may be used. The identifier of this vulnerability is VDB-269160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269160 - https://vuldb.com/?ctiid.269160 - https://vuldb.com/?submit.355264 - https://military-hail-377.notion.site/Tenda-A301V2-0-stack-overflow-c95f23f03b2b4eb5b8ffd3912e9982fd
CVE ID: CVE-2024-6190 State: PUBLISHED Published: 2024-06-20T14:31:04.290Z Last Updated: 2024-08-01T21:33:05.172Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Farm Management System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Farm Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-269162 is the identifier assigned to this vulnerability. Additional Analyst
disclosed to the public and may be used. VDB-269162 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269162 - https://vuldb.com/?ctiid.269162 - https://vuldb.com/?submit.359008 - https://github.com/HryspaHodor/CVE/issues/2