Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-20044 State: PUBLISHED Published: 2022-06-13T06:50:24.000Z Last Updated: 2025-04-15T14:25:33.679Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Navetti Products: PricePoint Problem Types: CWE-80 Description: A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to basic cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
o upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/24 - https://vuldb.com/?id.97863
CVE ID: CVE-2017-20045 State: PUBLISHED Published: 2022-06-13T06:50:26.000Z Last Updated: 2025-04-15T14:25:25.539Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Navetti Products: PricePoint Problem Types: CWE-352 Description: A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program C
le to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/24 - https://vuldb.com/?id.97864
CVE ID: CVE-2017-20046 State: REJECTED Published: 2022-06-15T17:35:20 Last Updated: 2022-09-16T20:45:26 Description: No description available.
CVE ID: CVE-2017-20047 State: REJECTED Published: 2022-06-15T17:35:22 Last Updated: 2022-09-16T19:59:27 Description: No description available.
CVE ID: CVE-2017-20048 State: REJECTED Published: 2022-06-15T17:35:24 Last Updated: 2022-09-16T20:45:34 Description: No description available.
CVE ID: CVE-2017-20049 State: PUBLISHED Published: 2022-06-15T17:35:25 Last Updated: 2024-08-05T21:45:25.224Z Vendors: n/a Products: AXIS OS Problem Types: Boa web server runs as root in legacy devices Description: A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/dam/public/df/f3/dd/cve-2017-20049-en-US-376956.pdf
CVE ID: CVE-2017-20050 State: REJECTED Published: 2022-06-15T17:35:27 Last Updated: 2022-09-16T20:02:49 Description: No description available.
CVE ID: CVE-2017-20051 State: PUBLISHED Published: 2022-06-16T06:15:18.000Z Last Updated: 2025-04-15T14:25:02.579Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: InnoSetup Products: Installer Problem Types: CWE-427 Description: A vulnerability was found in InnoSetup Installer. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to uncontrolled search path. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/8 - h
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/8 - https://vuldb.com/?id.97837
CVE ID: CVE-2017-20052 State: PUBLISHED Published: 2022-06-16T06:15:20.000Z Last Updated: 2025-04-15T14:24:54.993Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Python Problem Types: CWE-427 Description: A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/92 - https://vuld
Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/92 - https://vuldb.com/?id.97822 - https://security.netapp.com/advisory/ntap-20220804-0005/
CVE ID: CVE-2017-20053 State: PUBLISHED Published: 2022-06-16T12:20:19.000Z Last Updated: 2025-04-15T14:24:46.128Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: XYZScripts Products: Contact Form Manager Plugin Problem Types: CWE-352 Description: A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://se
lic and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/99 - https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html - https://vuldb.com/?id.97387
CVE ID: CVE-2017-20054 State: PUBLISHED Published: 2022-06-16T12:20:21.000Z Last Updated: 2025-04-15T14:24:38.197Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: XYZScripts Products: Contact Form Manager Plugin Problem Types: CWE-80 Description: A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fu
e used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/99 - https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html - https://vuldb.com/?id.97388
CVE ID: CVE-2017-20055 State: PUBLISHED Published: 2022-06-16T12:20:22.000Z Last Updated: 2025-04-15T14:24:31.117Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: BestWebSoft Products: Contact Form Plugin Problem Types: CWE-80 Description: A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.2 is able to address this issue. It is recommended to upgrade the affected component. Additional Analy
ng to version 4.0.2 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/100 - https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_contact_form_wordpress_plugin.html - https://vuldb.com/?id.97389
CVE ID: CVE-2017-20056 State: PUBLISHED Published: 2022-06-16T12:20:24.000Z Last Updated: 2025-04-15T14:24:24.147Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: weblizar Products: User Login Log Plugin Problem Types: CWE-80 Description: A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Stored). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclo
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/98 - https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_user_login_log_wordpress_plugin.html - https://vuldb.com/?id.97386
CVE ID: CVE-2017-20057 State: PUBLISHED Published: 2022-06-20T04:50:25.000Z Last Updated: 2025-04-15T14:20:19.971Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Elefant Products: CMS Problem Types: CWE-80 Description: A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
nded to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/36 - https://vuldb.com/?id.97254
CVE ID: CVE-2017-20058 State: PUBLISHED Published: 2022-06-20T04:50:27.000Z Last Updated: 2025-04-15T14:20:12.230Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Elefant Products: CMS Problem Types: CWE-80 Description: A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting (Persistent). The attack can be launched remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CIS
his issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/36 - https://vuldb.com/?id.97255
CVE ID: CVE-2017-20059 State: PUBLISHED Published: 2022-06-20T04:50:28.000Z Last Updated: 2025-04-15T14:20:02.718Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Elefant Products: CMS Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functionality of the component Title Handler. The manipulation with the input </title><img src=no onerror=alert(1)> leads to basic cross site scripting (Persistent). The attack may be launched remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component.
motely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/36 - https://vuldb.com/?id.97256
CVE ID: CVE-2017-20060 State: PUBLISHED Published: 2022-06-20T04:50:30.000Z Last Updated: 2025-04-15T14:19:53.301Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Elefant Products: CMS Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting (Persistent). It is possible to initiate the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/36 - https://vuldb.com/?id.97257
CVE ID: CVE-2017-20061 State: PUBLISHED Published: 2022-06-20T04:50:31.000Z Last Updated: 2025-04-15T14:19:44.929Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Elefant Products: CMS Problem Types: CWE-80 Description: A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknown code of the file /admin/extended. The manipulation of the argument name with the input %3Cimg%20src=no%20onerror=alert(1)%3E leads to basic cross site scripting (Reflected). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.13 is able to address thi
motely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/36 - https://vuldb.com/?id.97258
CVE ID: CVE-2017-20062 State: PUBLISHED Published: 2022-06-20T04:50:33.000Z Last Updated: 2025-04-15T14:19:28.944Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Elefant Products: CMS Problem Types: CWE-352 Description: A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CI
this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/37 - https://vuldb.com/?id.97259
CVE ID: CVE-2017-20063 State: PUBLISHED Published: 2022-06-20T04:50:34.000Z Last Updated: 2025-04-15T14:19:12.837Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Elefant Products: CMS Problem Types: CWE-269 Description: A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of the component File Upload. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Con
to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/39 - https://vuldb.com/?id.97260
CVE ID: CVE-2017-20064 State: PUBLISHED Published: 2022-06-20T04:50:36.000Z Last Updated: 2025-04-15T14:19:05.206Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Elefant Products: CMS Problem Types: CWE-94 Description: A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /designer/add/layout. The manipulation leads to code injection. The attack can be launched remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/39 - https://vuldb.com/?id.97261
CVE ID: CVE-2017-20065 State: PUBLISHED Published: 2022-06-20T20:10:17.000Z Last Updated: 2025-04-15T14:18:55.119Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Supsystic Products: Popup Plugin Problem Types: CWE-352 Description: A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/97 - https://
CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/97 - https://www.exploit-db.com/exploits/41485/ - https://map.httpcs.com/alert/284665 - https://vuldb.com/?id.97385
CVE ID: CVE-2017-20066 State: PUBLISHED Published: 2022-06-20T20:10:19.000Z Last Updated: 2025-04-15T14:18:46.832Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Adminer Login Problem Types: CWE-284 Description: A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/96
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/96 - https://sumofpwn.nl/advisory/2016/wordpress_adminer_plugin_allows_public__local__database_login.html - https://vuldb.com/?id.97384
CVE ID: CVE-2017-20067 State: PUBLISHED Published: 2022-06-21T06:05:40.000Z Last Updated: 2025-04-15T14:18:36.716Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-89 Description: A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95407
CVE ID: CVE-2017-20068 State: PUBLISHED Published: 2022-06-21T06:05:42.000Z Last Updated: 2025-04-15T14:18:21.329Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/usermanagement.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
ed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95408
CVE ID: CVE-2017-20069 State: PUBLISHED Published: 2022-06-21T06:05:43.000Z Last Updated: 2025-04-15T14:18:10.809Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability classified as critical has been found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/countrymanagement.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://w
lic and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95409
CVE ID: CVE-2017-20070 State: PUBLISHED Published: 2022-06-21T06:05:45.000Z Last Updated: 2025-04-15T14:17:59.199Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability classified as critical was found in Hindu Matrimonial Script. This vulnerability affects unknown code of the file /admin/communitymanagement.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
c and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95410
CVE ID: CVE-2017-20071 State: PUBLISHED Published: 2022-06-21T06:05:47.000Z Last Updated: 2025-04-15T14:17:47.678Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. This issue affects some unknown processing of the file /admin/renewaldue.php. The manipulation leads to improper privilege management. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
o the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95411
CVE ID: CVE-2017-20072 State: PUBLISHED Published: 2022-06-21T06:05:49.000Z Last Updated: 2025-04-15T14:17:34.948Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/generalsettings.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
he public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41044/ - https://vuldb.com/?id.95412
CVE ID: CVE-2017-20073 State: PUBLISHED Published: 2022-06-21T06:05:51.000Z Last Updated: 2025-04-15T14:17:23.805Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Hindu Matrimonial Script Problem Types: CWE-269 Description: A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -