Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9787 State: PUBLISHED Published: 2024-10-10T13:31:03.961Z Last Updated: 2024-10-11T16:56:57.432Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Contemporary Control System Products: BASrouter BACnet BASRT-B Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This affects an unknown part of the component UDP Packet Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279939 - https://vuldb.com/?ctiid.279939 - https://vuldb.com/?submit.414499 - https://github.com/isZzzz/BASRT-B_BriefDoS_Document/blob/main/report.md
CVE ID: CVE-2024-9788 State: PUBLISHED Published: 2024-10-10T14:00:08.544Z Last Updated: 2024-10-10T14:23:57.951Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: LyLme_spage Problem Types: CWE-89 Description: A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279940 - https://vuldb.com/?ctiid.279940 - https://vuldb.com/?submit.414574 - https://wiki.shikangsi.com/post/share/9c237d56-972e-40b4-9656-a1083ed84702
CVE ID: CVE-2024-9789 State: PUBLISHED Published: 2024-10-10T14:00:12.666Z Last Updated: 2024-10-10T14:22:47.848Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: LyLme_spage Problem Types: CWE-89 Description: A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279941 - https://vuldb.com/?ctiid.279941 - https://vuldb.com/?submit.414575 - https://wiki.shikangsi.com/post/share/9c237d56-972e-40b4-9656-a1083ed84702
CVE ID: CVE-2024-9790 State: PUBLISHED Published: 2024-10-10T15:00:10.697Z Last Updated: 2024-10-10T15:39:41.960Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: LyLme_spage Problem Types: CWE-89 Description: A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
bout this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279942 - https://vuldb.com/?ctiid.279942 - https://vuldb.com/?submit.414578 - https://wiki.shikangsi.com/post/share/9c237d56-972e-40b4-9656-a1083ed84702
CVE ID: CVE-2024-9792 State: PUBLISHED Published: 2024-10-10T15:00:12.311Z Last Updated: 2024-10-10T15:36:26.208Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: D-Link Products: DSL-2750U Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279945 - https://vuldb.com/?ctiid.279945 - https://vuldb.com/?submit.415532 - https://ww
rences: - https://vuldb.com/?id.279945 - https://vuldb.com/?ctiid.279945 - https://vuldb.com/?submit.415532 - https://www.dlink.com/
CVE ID: CVE-2024-9793 State: PUBLISHED Published: 2024-10-10T15:31:06.625Z Last Updated: 2024-10-10T17:46:05.897Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tenda Products: AC1206 Problem Types: CWE-77 Description: A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. This vulnerability affects the function ate_iwpriv_set/ate_ifconfig_set of the file /goform/ate. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
ted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279946 - https://vuldb.com/?ctiid.279946 - https://vuldb.com/?submit.418061 - https://github.com/ixout/iotVuls/blob/main/Tenda/ac1206_004/report.md - https://github.com/ixout/iotVuls/blob/main/Tenda/ac1206_003/report.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-9794 State: PUBLISHED Published: 2024-10-10T16:00:07.327Z Last Updated: 2024-10-10T16:27:19.317Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Online Shopping Portal Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.27
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279947 - https://vuldb.com/?ctiid.279947 - https://vuldb.com/?submit.417583 - https://github.com/ppp-src/CVE/issues/7
CVE ID: CVE-2024-9796 State: PUBLISHED Published: 2024-10-10T07:38:30.282Z Last Updated: 2024-10-10T14:54:46.206Z Vendors: Unknown Products: WP-Advanced-Search Problem Types: CWE-89 SQL Injection Description: The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2ddd6839-6bcb-4bb8-97e0-1516b8c2b99b/
CVE ID: CVE-2024-9797 State: PUBLISHED Published: 2024-10-10T16:31:04.826Z Last Updated: 2024-10-10T16:53:24.758Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file register.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279948 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279948 - https://vuldb.com/?ctiid.279948 - https://vuldb.com/?submit.417586 - https://github.com/siyuancn-hub/cve/blob/main/sql4-user.md - https://code-projects.org/
CVE ID: CVE-2024-9798 State: PUBLISHED Published: 2024-10-10T07:29:10.066Z Last Updated: 2024-10-10T14:21:58.664Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:T/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:N/MUI:N/MS:C/MC:H/MI:H/MA:H) Vendors: Open Mainframe Project Products: Zowe Description: The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zowe/api-layer
CVE ID: CVE-2024-9799 State: PUBLISHED Published: 2024-10-10T16:31:06.825Z Last Updated: 2024-10-10T16:52:19.158Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Profile Registration without Reload Refresh Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument email_address/address/company_name/job_title/jobDescriptionparameter leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public
ameter leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279949 - https://vuldb.com/?ctiid.279949 - https://vuldb.com/?submit.417589 - https://gist.github.com/sechurity/07c5a3a15f21313ee657d05baadbee19 - https://www.sourcecodester.com/
CVE ID: CVE-2024-9802 State: PUBLISHED Published: 2024-10-10T07:41:03.374Z Last Updated: 2024-10-10T14:22:43.244Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C) Vendors: Open Mainframe Project Products: Zowe Description: The conformance validation endpoint is public so everybody can verify the conformance of onboarded services. The response could contain specific information about the service, including available endpoints, and swagger. It could advise about the running version of a service to an attacker. The attacker could also check if a service is running. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zowe/api-
k if a service is running. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zowe/api-layer
CVE ID: CVE-2024-9803 State: PUBLISHED Published: 2024-10-10T17:00:06.583Z Last Updated: 2024-10-10T18:10:09.066Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-79 Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file blooddetails.php. The manipulation of the argument Availibility leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA
n disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279951 - https://vuldb.com/?ctiid.279951 - https://vuldb.com/?submit.418615 - https://github.com/cookie5201314/CVE/blob/main/xss4-w.md - https://code-projects.org/
CVE ID: CVE-2024-9804 State: PUBLISHED Published: 2024-10-10T17:31:06.161Z Last Updated: 2024-10-10T18:06:28.229Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/campsdetails.php. The manipulation of the argument hospital leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References
d may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279952 - https://vuldb.com/?ctiid.279952 - https://vuldb.com/?submit.418618 - https://github.com/sternstundes/cve/blob/main/sql5-campdetails.md - https://code-projects.org/
CVE ID: CVE-2024-9805 State: PUBLISHED Published: 2024-10-10T18:00:06.750Z Last Updated: 2024-10-10T18:16:24.940Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-79 Description: A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/campsdetails.php. The manipulation of the argument hospital/address/city/contact leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "hospital". Addi
en disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "hospital". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279953 - https://vuldb.com/?ctiid.279953 - https://vuldb.com/?submit.418619 - https://github.com/sternstundes/cve/blob/main/xss5.md - https://code-projects.org/
CVE ID: CVE-2024-9806 State: PUBLISHED Published: 2024-10-10T18:31:04.109Z Last Updated: 2024-10-10T18:41:59.638Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Craig Rodway Products: Classroombookings Problem Types: CWE-79 Description: A vulnerability has been found in Craig Rodway Classroombookings up to 2.8.6 and classified as problematic. This vulnerability affects unknown code of the file /rooms/fields of the component Room Page. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.8.7 is able to address this issue. It is recommended to u
isclosed to the public and may be used. Upgrading to version 2.8.7 is able to address this issue. It is recommended to upgrade the affected component. The project maintainer was contacted early about the disclosure. He responded very quickly, friendly, and professional. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279958 - https://vuldb.com/?ctiid.279958 - https://vuldb.com/?submit.418715 - https://github.com/JunMing27/CVE/blob/main/CVE%20-%20classroombookings%20Cross%20Site%20Scripting%20(XSS)%20at%20custom%20field.md
CVE ID: CVE-2024-9807 State: PUBLISHED Published: 2024-10-10T19:00:06.255Z Last Updated: 2024-10-10T19:30:35.513Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Craig Rodway Products: Classroombookings Problem Types: CWE-79 Description: A vulnerability was found in Craig Rodway Classroombookings 2.8.7 and classified as problematic. This issue affects some unknown processing of the file /sessions of the component Session Page. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.8.8 is able to address this issue. It is recommended to upgrade the affected component. The project maintainer was contacted e
able to address this issue. It is recommended to upgrade the affected component. The project maintainer was contacted early about the disclosure. He responded very quickly, friendly, and professional. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279959 - https://vuldb.com/?ctiid.279959 - https://vuldb.com/?submit.419262 - https://github.com/JunMing27/CVE/blob/main/CVE%20-%20classroombookings%20Cross%20Site%20Scripting%20(XSS)%20at%20create%20and%20edit%20session%20page%20via%20Administrator%20Dashboard.md
CVE ID: CVE-2024-9808 State: PUBLISHED Published: 2024-10-10T19:31:04.953Z Last Updated: 2024-10-10T19:52:32.636Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Eyewear Shop Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=products/view_product. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.27996
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279960 - https://vuldb.com/?ctiid.279960 - https://vuldb.com/?submit.420744 - https://github.com/r1ckyL/cve/blob/main/sql.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9809 State: PUBLISHED Published: 2024-10-10T19:31:07.082Z Last Updated: 2024-10-10T19:51:24.624Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Eyewear Shop Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function delete_product of the file /classes/Master.php?f=delete_product. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279961 - https://vuldb.com/?ctiid.279961 - https://vuldb.com/?submit.420745 - https://github.com/wuyanzu-lab/cve/blob/main/sql.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9810 State: PUBLISHED Published: 2024-10-10T20:00:08.173Z Last Updated: 2024-10-10T20:33:47.579Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Record Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file sort2_user.php. The manipulation of the argument qualification leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279962 - https://vuldb.com/?ctiid.279962 - https://vuldb.com/?submit.420806 - https://github.com/GangZhou1/VUL/blob/main/Record-Management-System-1.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9811 State: PUBLISHED Published: 2024-10-10T20:31:04.919Z Last Updated: 2024-10-10T20:42:29.434Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Restaurant Reservation System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. This affects an unknown part of the file filter3.php. The manipulation of the argument company leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279963 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279963 - https://vuldb.com/?ctiid.279963 - https://vuldb.com/?submit.418728 - https://github.com/ppp-src/a/issues/24 - https://code-projects.org/
CVE ID: CVE-2024-9812 State: PUBLISHED Published: 2024-10-10T21:00:06.479Z Last Updated: 2024-10-11T19:05:04.739Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Crud Operation System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in code-projects Crud Operation System 1.0. This vulnerability affects unknown code of the file delete.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279964 - https://vuldb.com/?ctiid.27996
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279964 - https://vuldb.com/?ctiid.279964 - https://vuldb.com/?submit.418729 - https://github.com/ppp-src/a/issues/25 - https://code-projects.org/
CVE ID: CVE-2024-9813 State: PUBLISHED Published: 2024-10-10T21:00:08.183Z Last Updated: 2024-10-11T19:03:37.853Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Pharmacy Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Codezips Pharmacy Management System 1.0. This issue affects some unknown processing of the file product/register.php. The manipulation of the argument category leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2799
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279965 - https://vuldb.com/?ctiid.279965 - https://vuldb.com/?submit.418904 - https://github.com/ppp-src/CVE/issues/10
CVE ID: CVE-2024-9814 State: PUBLISHED Published: 2024-10-10T21:31:04.359Z Last Updated: 2024-10-11T15:31:09.499Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Pharmacy Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Codezips Pharmacy Management System 1.0. Affected is an unknown function of the file product/update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279966 - https://vul
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279966 - https://vuldb.com/?ctiid.279966 - https://vuldb.com/?submit.418905 - https://github.com/ppp-src/CVE/issues/11
CVE ID: CVE-2024-9815 State: PUBLISHED Published: 2024-10-10T21:31:05.807Z Last Updated: 2024-10-11T15:29:29.207Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Codezips Products: Tourist Management System Problem Types: CWE-434 Description: A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279967 - https://vuldb.com/?ctiid.279967 - https://vuldb.com/?submit.418917 - https://github.com/ppp-src/CVE/issues/12