Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-12955 State: PUBLISHED Published: 2024-12-26T14:31:05.280Z Last Updated: 2024-12-26T15:36:31.939Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHPGurukul Products: Blood Bank & Donor Management System Problem Types: CWE-352, CWE-862 Description: A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of the file /logout.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289318 - https://vuldb.com/?ctiid.289318 - https://vuldb.com/?submit.468878 - https://phpgurukul.com/
CVE ID: CVE-2024-12956 State: PUBLISHED Published: 2024-12-26T15:00:14.001Z Last Updated: 2024-12-26T15:25:37.840Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 1000 Projects Products: Portfolio Management System MCA Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /add_achievement_details.php. The manipulation of the argument ach_certy leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289319 - https://vuldb.com/?ctiid.289319 - https://vuldb.com/?submit.468540 - https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README2.md - https://1000projects.org/
CVE ID: CVE-2024-12957 State: PUBLISHED Published: 2025-01-23T09:41:12.337Z Last Updated: 2025-02-12T19:19:31.413Z Vendors: ASUS Products: Armoury Crate Problem Types: CWE-306 Description: A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion. Refer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/content/asus-product-security-advisory/
CVE ID: CVE-2024-12958 State: PUBLISHED Published: 2024-12-26T15:31:04.887Z Last Updated: 2024-12-27T14:23:57.757Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Portfolio Management System MCA Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_pro_details.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289323 - https://vuldb.com/?ctiid.289323 - https://vuldb.com/?submit.468799 - https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README6.md - https://1000projects.org/
CVE ID: CVE-2024-12959 State: PUBLISHED Published: 2024-12-26T16:00:16.247Z Last Updated: 2024-12-26T18:06:55.742Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Portfolio Management System MCA Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /update_personal_details.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289324 - https://vuldb.com/?ctiid.289324 - https://vuldb.com/?submit.468800 - https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README7.md - https://1000projects.org/
CVE ID: CVE-2024-12960 State: PUBLISHED Published: 2024-12-26T17:31:04.475Z Last Updated: 2024-12-26T17:53:08.609Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Portfolio Management System MCA Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. This issue affects some unknown processing of the file /update_edu_details.php. The manipulation of the argument q leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289325 - https://vuldb.com/?ctiid.289325 - https://vuldb.com/?submit.468804 - https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README8.md - https://1000projects.org/
CVE ID: CVE-2024-12961 State: PUBLISHED Published: 2024-12-26T18:00:14.407Z Last Updated: 2024-12-26T18:39:08.267Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Portfolio Management System MCA Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /update_ach_details.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289326 - https://vuldb.com/?ctiid.289326 - https://vuldb.com/?submit.468805 - https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README9.md - https://1000projects.org/
CVE ID: CVE-2024-12962 State: PUBLISHED Published: 2024-12-26T19:00:07.428Z Last Updated: 2024-12-26T19:15:34.464Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /_parse/_all_edits.php. The manipulation of the argument skillset leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289327 - https://vuldb.com/?ctiid.289327 - https://vuldb.com/?submit.468921 - https://github.com/UnrealdDei/cve/blob/main/sql5.md - https://code-projects.org/
CVE ID: CVE-2024-12963 State: PUBLISHED Published: 2024-12-26T19:31:04.945Z Last Updated: 2024-12-27T16:49:49.741Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this issue is the function add_xp of the file /_parse/_all_edits.php. The manipulation of the argument job_company leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
ic and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289328 - https://vuldb.com/?ctiid.289328 - https://vuldb.com/?submit.468922 - https://github.com/UnrealdDei/cve/blob/main/sql6.md - https://code-projects.org/
CVE ID: CVE-2024-12964 State: PUBLISHED Published: 2024-12-26T20:00:14.873Z Last Updated: 2024-12-27T16:49:13.098Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Daily College Class Work Report Book Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289329 - https://vuldb.com/?ctiid.289329 - https://vuldb.com/?submit.468976 - https://github.com/alc9700jmo/CVE/issues/4 - https://1000projects.org/
CVE ID: CVE-2024-12965 State: PUBLISHED Published: 2024-12-26T20:31:04.438Z Last Updated: 2024-12-27T16:48:25.782Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Portfolio Management System MCA Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /update_ex_detail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289330 - https://vuldb.com/?ctiid.289330 - https://vuldb.com/?submit.468989 - https://github.com/dawatermelon/CVE/blob/main/Portfolio%20Management%20System%20MCA%20Project/README10.md - https://1000projects.org/
CVE ID: CVE-2024-12966 State: PUBLISHED Published: 2024-12-26T21:00:12.125Z Last Updated: 2024-12-27T16:20:07.516Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function cn_update of the file /_parse/_all_edits.php. The manipulation of the argument cname/url leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289331 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289331 - https://vuldb.com/?ctiid.289331 - https://vuldb.com/?submit.469000 - https://github.com/Viper0617/cve/blob/main/sql-viper.md - https://code-projects.org/
CVE ID: CVE-2024-12967 State: PUBLISHED Published: 2024-12-26T21:31:05.327Z Last Updated: 2024-12-30T14:40:15.840Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fname/lname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289332 - http
ic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289332 - https://vuldb.com/?ctiid.289332 - https://vuldb.com/?submit.469002 - https://github.com/glqt/CVE/blob/main/sql-glqt.md - https://code-projects.org/
CVE ID: CVE-2024-12968 State: PUBLISHED Published: 2024-12-26T22:00:19.421Z Last Updated: 2024-12-27T16:16:20.008Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Affected by this vulnerability is the function edit_jobpost of the file /_parse/_all_edits.php. The manipulation of the argument jobtype leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment:
e public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289333 - https://vuldb.com/?ctiid.289333 - https://vuldb.com/?submit.469021 - https://github.com/705298066/cve/blob/main/sql-1-kzk.md - https://code-projects.org/
CVE ID: CVE-2024-12969 State: PUBLISHED Published: 2024-12-26T22:31:05.249Z Last Updated: 2024-12-27T16:15:41.479Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA AD
be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289334 - https://vuldb.com/?ctiid.289334 - https://vuldb.com/?submit.469031 - https://github.com/Rocky-Bull/myCVE/blob/main/Hospital_Management_System_SQLi.md - https://code-projects.org/
CVE ID: CVE-2024-12970 State: PUBLISHED Published: 2025-01-06T11:19:17.529Z Last Updated: 2025-01-06T13:34:13.312Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: TUBITAK BILGEM Products: Pardus OS My Computer Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection.This issue affects Pardus OS My Computer: before 0.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1900
CVE ID: CVE-2024-12971 State: PUBLISHED Published: 2025-03-17T09:19:31.761Z Last Updated: 2025-03-17T12:32:34.801Z Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-77 Description: Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2024-12972 State: PUBLISHED Published: 2025-09-02T11:38:30.348Z Last Updated: 2025-09-02T13:32:53.051Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: OctoCloud Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS).This issue affects OctoCloud: from s1.09.01 before v1.11.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0203
CVE ID: CVE-2024-12973 State: PUBLISHED Published: 2025-09-02T11:43:35.654Z Last Updated: 2025-09-02T13:32:24.738Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: OctoCloud Problem Types: CWE-346 Description: Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing.This issue affects OctoCloud: from s1.09.01 before v1.11.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0203
CVE ID: CVE-2024-12974 State: PUBLISHED Published: 2025-09-02T13:19:38.748Z Last Updated: 2025-09-02T19:31:01.625Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: ProKuaför Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting (XSS).This issue affects ProKuaför: from s1.02.07 before v1.02.08. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0204
CVE ID: CVE-2024-12975 State: PUBLISHED Published: 2025-03-07T16:41:10.424Z Last Updated: 2025-09-16T16:04:39.976Z Vendors: Silicon Labs Products: Simplicity SDK Problem Types: CWE-126 Description: A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.silabs.com/069Vm00000LWXMeIAP - https://github.com/SiliconLabs/simplicity_sdk/releases
CVE ID: CVE-2024-12976 State: PUBLISHED Published: 2024-12-27T01:00:12.468Z Last Updated: 2024-12-27T18:39:59.668Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: CodeZips Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnric
to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289352 - https://vuldb.com/?ctiid.289352 - https://vuldb.com/?submit.469072 - https://github.com/nexus-wkx/CVE/blob/main/SQL_Injection_in_Hospital_Management_System.md
CVE ID: CVE-2024-12977 State: PUBLISHED Published: 2024-12-27T01:31:06.730Z Last Updated: 2024-12-27T18:41:07.314Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.28935
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289353 - https://vuldb.com/?ctiid.289353 - https://vuldb.com/?submit.469112 - https://github.com/AngrySheep2003/cve/blob/main/Complaint_Management_System_SQL_Injection.md - https://phpgurukul.com/
CVE ID: CVE-2024-12978 State: PUBLISHED Published: 2024-12-27T04:00:15.836Z Last Updated: 2024-12-27T15:09:27.798Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. This vulnerability affects the function add_req of the file /_parse/_all_edits.php. The manipulation of the argument jid/limit leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289354
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289354 - https://vuldb.com/?ctiid.289354 - https://vuldb.com/?submit.469145 - https://github.com/UnrealdDei/cve/blob/main/sql7.md - https://code-projects.org/
CVE ID: CVE-2024-12979 State: PUBLISHED Published: 2024-12-27T04:31:05.267Z Last Updated: 2024-12-27T15:08:46.626Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Job Recruitment 1.0 and classified as problematic. This issue affects the function cn_update of the file /_parse/_all_edits.php. The manipulation of the argument cname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
c and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289355 - https://vuldb.com/?ctiid.289355 - https://vuldb.com/?submit.469180 - https://github.com/705298066/cve/blob/main/xss-1.md - https://code-projects.org/
CVE ID: CVE-2024-12980 State: PUBLISHED Published: 2024-12-27T05:00:07.758Z Last Updated: 2024-12-27T15:08:12.400Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fname/lname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289356 - https://vuldb.com/?ctiid.289356 - https://vuldb.com/?submit.469181 - https://github.com/705298066/cve/blob/main/xss-2.md - https://code-projects.org/
CVE ID: CVE-2024-12981 State: PUBLISHED Published: 2024-12-27T05:31:05.877Z Last Updated: 2024-12-27T15:07:26.202Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeAstro Products: Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bookingconfirm.php. The manipulation of the argument driver_id_from_dropdown leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CIS
een disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.289357 - https://vuldb.com/?ctiid.289357 - https://vuldb.com/?submit.469156 - https://github.com/CharilYang/cve/issues/1 - https://codeastro.com/