Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0891 State: PUBLISHED Published: 2023-05-02T07:04:56.110Z Last Updated: 2025-01-30T14:38:32.804Z Vendors: Unknown Products: StagTools Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The StagTools WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/72397fee-9768-462b-933c-400181a5487c
CVE ID: CVE-2023-0892 State: PUBLISHED Published: 2023-05-15T12:15:34.079Z Last Updated: 2025-01-24T20:41:27.162Z Vendors: Unknown Products: BizLibrary Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/54150be5-a53f-4b94-8ce5-04e073e3ab1f
CVE ID: CVE-2023-0893 State: PUBLISHED Published: 2023-04-10T13:17:53.888Z Last Updated: 2025-02-11T15:13:23.965Z Vendors: Unknown Products: Time Sheets Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Time Sheets WordPress plugin before 1.29.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fd6ef6ee-15e9-44ac-a2db-976393a3b71a
CVE ID: CVE-2023-0894 State: PUBLISHED Published: 2023-05-08T13:58:01.243Z Last Updated: 2025-01-29T15:09:22.108Z Vendors: Unknown Products: Pickup | Delivery | Dine-in date time Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Pickup | Delivery | Dine-in date time WordPress plugin through 1.0.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d42eff41-096f-401d-bbfb-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d42eff41-096f-401d-bbfb-dcd6e08faca5
CVE ID: CVE-2023-0895 State: PUBLISHED Published: 2023-02-17T16:57:27.952Z Last Updated: 2025-01-13T17:05:18.087Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: wpcalc Products: WP Coder – add custom html, css and js code Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The WP Coder – add custom html, css and js code plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for au
the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with administrative privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e4b6a9cd-4d29-4bd8-afa3-b5d455ad8340 - https://plugins.trac.wordpress.org/changeset?old=2757782&old_path=wp-coder%2Ftrunk%2Fadmin%2Fpartials%2Finclude-data.php&new=&new_path=wp-coder%2Ftrunk%2Fadmin%2Fpartials%2Finclude-data.php
CVE ID: CVE-2023-0896 State: PUBLISHED Published: 2023-05-01T13:52:23.203Z Last Updated: 2025-01-30T15:54:28.031Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Lenovo Smart Clock Essential with Alexa Built In Problem Types: CWE-20 Description: A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-113714
CVE ID: CVE-2023-0897 State: PUBLISHED Published: 2023-10-26T19:44:01.703Z Last Updated: 2025-01-16T21:27:45.701Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Sielco Products: PolyEco1000 Problem Types: CWE-384 Description: Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07
CVE ID: CVE-2023-0898 State: PUBLISHED Published: 2023-11-07T16:34:41.246Z Last Updated: 2025-01-16T21:26:36.149Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H) Vendors: General Electric Products: MiCOM S1 Agile Problem Types: CWE-427 Description: General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-311-23
CVE ID: CVE-2023-0899 State: PUBLISHED Published: 2023-04-24T18:30:50.686Z Last Updated: 2025-02-04T18:41:37.250Z Vendors: Unknown Products: Steveas WP Live Chat Shoutbox Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before outputting it back in the Shoutbox, leading to Stored Cross-Site Scripting which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e95f925f-118e-4fa1-8e8f-9dc1bc698f12
CVE ID: CVE-2023-0900 State: PUBLISHED Published: 2023-06-05T13:39:01.736Z Last Updated: 2025-01-08T16:30:57.676Z Vendors: Unknown Products: Pricing Table Builder Problem Types: CWE-89 SQL Injection Description: The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f601e637-a486-4f3a-9077-4f294ace7ea1
CVE ID: CVE-2023-0901 State: PUBLISHED Published: 2023-02-18T00:00:00.000Z Last Updated: 2025-03-12T19:57:59.255Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: pixelfed Products: pixelfed/pixelfed Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0327b1b2-6e7c-4154-a307-15f236571010 - https://github.com/pixelfed/pixelfed/commit/5b5f5bc38ca9ba39d0b7dacc3813fb899f71ba57
CVE ID: CVE-2023-0902 State: PUBLISHED Published: 2023-02-18T07:31:22.384Z Last Updated: 2024-08-02T05:24:34.607Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Food Ordering System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file process_order.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221451. Additional Analyst N
losed to the public and may be used. The associated identifier of this vulnerability is VDB-221451. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.221451 - https://vuldb.com/?ctiid.221451 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Simple%20Food%20Ordering%20System%20-%20Authenticated%20Reflected%20XSS.md
CVE ID: CVE-2023-0903 State: PUBLISHED Published: 2023-02-18T07:35:04.544Z Last Updated: 2024-11-25T16:26:00.370Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Employee Task Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the argument task_id leads to sql injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the publi
exity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221452. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221452 - https://vuldb.com/?ctiid.221452 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20SQL%20Injection.md
CVE ID: CVE-2023-0904 State: PUBLISHED Published: 2023-02-18T07:37:20.668Z Last Updated: 2024-08-02T05:24:34.782Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee Task Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument task_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221453 was assigned to this vulnerability. Additional Analyst No
losed to the public and may be used. The identifier VDB-221453 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221453 - https://vuldb.com/?ctiid.221453 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20SQL%20Injection%20-%202.md
CVE ID: CVE-2023-0905 State: PUBLISHED Published: 2023-02-18T07:39:33.240Z Last Updated: 2024-08-02T05:24:34.784Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee Task Management System Problem Types: CWE-287 Description: A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221454 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-221454 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221454 - https://vuldb.com/?ctiid.221454 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20Broken%20Authentication.md
CVE ID: CVE-2023-0906 State: PUBLISHED Published: 2023-02-18T07:41:49.342Z Last Updated: 2024-08-02T05:24:34.638Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Pizza Ordering System Problem Types: CWE-306 Description: A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. Affected by this vulnerability is the function delete_category of the file ajax.php of the component POST Parameter Handler. The manipulation leads to missing authentication. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-221455. Additional Analyst Notes: - CVE Program Container: Referenc
e associated identifier of this vulnerability is VDB-221455. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221455 - https://vuldb.com/?ctiid.221455
CVE ID: CVE-2023-0907 State: PUBLISHED Published: 2023-02-18T07:44:22.696Z Last Updated: 2024-08-02T05:24:34.867Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Filseclab Products: Twister Antivirus Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in Filseclab Twister Antivirus 8.17. Affected by this issue is the function 0x220017 in the library ffsmon.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221456. Additional
xploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221456. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221456 - https://vuldb.com/?ctiid.221456 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0907
CVE ID: CVE-2023-0908 State: PUBLISHED Published: 2023-02-18T07:55:18.522Z Last Updated: 2024-08-02T05:24:34.717Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Xoslab Products: Easy File Locker Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
c and may be used. The identifier VDB-221457 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221457 - https://vuldb.com/?ctiid.221457 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908
CVE ID: CVE-2023-0909 State: PUBLISHED Published: 2023-02-18T08:34:15.314Z Last Updated: 2024-08-02T05:24:34.699Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: cxasm Products: notepad-- Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in cxasm notepad-- 1.22. This affects an unknown part of the component Directory Comparison Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The associated identifier of this vulnerability is VDB-221475. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221475 - https://vuldb.com/?ctiid.221475 -
l Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221475 - https://vuldb.com/?ctiid.221475 - https://gitee.com/cxasm/notepad--/issues/I6C80Z
CVE ID: CVE-2023-0910 State: PUBLISHED Published: 2023-02-18T08:42:39.749Z Last Updated: 2024-08-02T05:24:34.596Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Pizza Ordering System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_prod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-221476. Additional Analyst Notes: - CVE Program Container: References: - https
e identifier of this vulnerability is VDB-221476. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221476 - https://vuldb.com/?ctiid.221476
CVE ID: CVE-2023-0911 State: PUBLISHED Published: 2023-03-20T15:52:23.686Z Last Updated: 2025-02-25T20:28:41.019Z Vendors: Unknown Products: WordPress Shortcodes Plugin — Shortcodes Ultimate Problem Types: CWE-862 Missing Authorization Description: The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user shortcode, allowing any authenticated users such as subscriber to retrieve arbitrary user meta (except the user_pass), such as the user email and activation key by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/35404d16-
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/35404d16-7213-4293-ac0d-926bd6c17444
CVE ID: CVE-2023-0912 State: PUBLISHED Published: 2023-02-18T19:33:05.673Z Last Updated: 2024-08-02T05:24:34.745Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Auto Dealer Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. This affects an unknown part of the file /adms/admin/?page=vehicles/view_transaction. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221481 was assigned to this vulnerability. Additional
s been disclosed to the public and may be used. The identifier VDB-221481 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221481 - https://vuldb.com/?ctiid.221481 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%201.md
CVE ID: CVE-2023-0913 State: PUBLISHED Published: 2023-02-18T19:34:33.791Z Last Updated: 2024-08-02T05:24:34.747Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Auto Dealer Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sell_vehicle. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221482 is the identifier assigned to this vulnerability. Additional Analyst
isclosed to the public and may be used. VDB-221482 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221482 - https://vuldb.com/?ctiid.221482 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%202.md
CVE ID: CVE-2023-0914 State: PUBLISHED Published: 2023-02-19T00:00:00 Last Updated: 2024-08-02T05:24:34.712Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: pixelfed Products: pixelfed/pixelfed Problem Types: CWE-285 Description: Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/54d5fd76-e038-4eda-9e03-d5e95e09c0ec - https://github.com/pixelfed/pixelfed/commit/ef56f92c3d77e9bafaa70c08b7c04d5a61b8d454
CVE ID: CVE-2023-0915 State: PUBLISHED Published: 2023-02-19T08:08:58.505Z Last Updated: 2024-11-25T15:33:25.324Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Auto Dealer Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manage_user. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221490 is the identifier assigned to this vulnerability. Additional Analyst
isclosed to the public and may be used. VDB-221490 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221490 - https://vuldb.com/?ctiid.221490 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%203.md
CVE ID: CVE-2023-0916 State: PUBLISHED Published: 2023-02-19T08:10:44.377Z Last Updated: 2024-08-02T05:24:34.762Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Auto Dealer Management System Problem Types: CWE-284 Description: A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221491. Additional Analyst Not
sed to the public and may be used. The associated identifier of this vulnerability is VDB-221491. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221491 - https://vuldb.com/?ctiid.221491 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20Broken%20Access%20Control.md
CVE ID: CVE-2023-0917 State: PUBLISHED Published: 2023-02-19T08:12:43.846Z Last Updated: 2024-08-02T05:24:34.821Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Customer Relationship Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221493 was assigned to this vu
emotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221493 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221493 - https://vuldb.com/?ctiid.221493 - https://github.com/awans2023/CVE/blob/main/README1.md
CVE ID: CVE-2023-0918 State: PUBLISHED Published: 2023-02-19T08:19:27.685Z Last Updated: 2025-03-18T15:41:46.796Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: codeprojects Products: Pharmacy Management System Problem Types: CWE-434 Description: A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221494 is the identifier assigned to this vulnerability. Additional Analyst Notes: