Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-4783 State: PUBLISHED Published: 2024-05-23T01:56:18.773Z Last Updated: 2024-08-01T20:55:09.304Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: baden03 Products: jQuery T(-) Countdown Widget Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The jQuery T(-) Countdown Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tminus shortcode in all versions up to, and including, 2.3.25 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level acc
put escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/78eeef12-123b-42f6-b446-c3f2d43153fd?source=cve - https://plugins.trac.wordpress.org/browser/jquery-t-countdown-widget/trunk/countdown-timer.php#L768
CVE ID: CVE-2024-4784 State: PUBLISHED Published: 2024-08-08T10:02:19.809Z Last Updated: 2024-08-29T15:04:58.457Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-305 Description: An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/461248 - https://hackerone.com/reports/2486223
CVE ID: CVE-2024-4785 State: PUBLISHED Published: 2024-08-19T22:10:05.249Z Last Updated: 2025-09-17T05:02:14.495Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-369 Description: BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xcr5-5g98-mchp
CVE ID: CVE-2024-4786 State: PUBLISHED Published: 2024-07-26T19:45:41.260Z Last Updated: 2024-08-01T20:55:08.718Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: Lenovo Products: Tab K10 Problem Types: CWE-295 Description: An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-158501
CVE ID: CVE-2024-4787 State: PUBLISHED Published: 2024-06-19T03:12:28.211Z Last Updated: 2024-08-01T20:55:08.734Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: StylemixThemes Products: Cost Calculator Builder PRO Problem Types: CWE-20 Improper Input Validation Description: The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 3.1.75. This is due to insufficient limitations on the email recipient and the content in the 'send_pdf' and the 'send_pdf_front' functions which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content
ions which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/035ada56-541d-47b3-8348-3401d94bb509?source=cve - https://docs.stylemixthemes.com/cost-calculator-builder/changelog-1/changelog-pro-version
CVE ID: CVE-2024-4788 State: PUBLISHED Published: 2024-06-06T02:02:50.599Z Last Updated: 2024-08-01T20:55:08.737Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: duongancol Products: Boostify Header Footer Builder for Elementor Problem Types: CWE-862 Missing Authorization Description: The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_bhf_post function in all versions up to, and including, 1.3.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to create pages or posts with arbitrary content. Additio
uthenticated attackers, with subscriber-level access and above, to create pages or posts with arbitrary content. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1090acfc-5b0c-478a-ac71-db54fdaefdf5?source=cve - https://plugins.trac.wordpress.org/browser/boostify-header-footer-builder/trunk/inc/admin/class-admin.php#L280
CVE ID: CVE-2024-4789 State: PUBLISHED Published: 2024-05-17T08:31:40.643Z Last Updated: 2024-08-01T20:55:09.397Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: StylemixThemes Products: Cost Calculator Builder PRO Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: Cost Calculator Builder Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to 3.1.72, via the send_demo_webhook() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify informati
e web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c6840350-7ff4-4ec2-bf2b-94ce6f782537?source=cve - https://stylemixthemes.com/cost-calculator-plugin/
CVE ID: CVE-2024-4790 State: PUBLISHED Published: 2024-05-11T23:31:03.662Z Last Updated: 2024-08-01T20:55:09.994Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: DedeCMS Problem Types: CWE-24 Description: A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263889 was assigned to this vulnerability. NOTE
oit has been disclosed to the public and may be used. The identifier VDB-263889 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263889 - https://vuldb.com/?ctiid.263889 - https://vuldb.com/?submit.329483 - https://github.com/gatsby2003/DedeCms/blob/main/Directory_traversal_arbitrary_file_read.md
CVE ID: CVE-2024-4791 State: PUBLISHED Published: 2024-05-12T01:00:05.262Z Last Updated: 2024-08-08T19:20:09.415Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C) Vendors: Contemporary Control System Products: BASrouter BACnet BASRT-B Problem Types: CWE-404 Description: A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the component Application Protocol Data Unit. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263890 is the identifier assigned to this vulnerability. NOTE: The vendor wa
isclosed to the public and may be used. VDB-263890 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.263890 - https://vuldb.com/?ctiid.263890 - https://vuldb.com/?submit.323630 - https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT-B_2_CVE_apply.pdf - https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASER-B_APDU.pcapng
CVE ID: CVE-2024-4792 State: PUBLISHED Published: 2024-05-12T02:00:04.415Z Last Updated: 2024-08-01T20:55:09.901Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Laundry Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Laundry Management System 1.0. This issue affects some unknown processing of the file /admin_class.php. The manipulation of the argument id/delete_category/delete_inv/delete_laundry/delete_supply/delete_user/login/save_inv/save_user leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be
r leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263891. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263891 - https://vuldb.com/?ctiid.263891 - https://vuldb.com/?submit.332533 - https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_action.md
CVE ID: CVE-2024-4793 State: PUBLISHED Published: 2024-05-12T03:00:04.373Z Last Updated: 2024-08-01T20:55:08.760Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Laundry Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Campcodes Online Laundry Management System 1.0. Affected is an unknown function of the file /manage_laundry.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263892. Additional Analyst Notes: - CISA ADP Vul
the public and may be used. The identifier of this vulnerability is VDB-263892. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263892 - https://vuldb.com/?ctiid.263892 - https://vuldb.com/?submit.332535 - https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_laundry.md
CVE ID: CVE-2024-4794 State: PUBLISHED Published: 2024-05-12T03:31:03.968Z Last Updated: 2024-08-01T20:55:08.736Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Laundry Management System Problem Types: CWE-89 Description: A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_receiving.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263893 was assigned to this vulnerability. Additional An
een disclosed to the public and may be used. The identifier VDB-263893 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263893 - https://vuldb.com/?ctiid.263893 - https://vuldb.com/?submit.332536 - https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_receiving.md
CVE ID: CVE-2024-4795 State: PUBLISHED Published: 2024-05-12T05:31:03.852Z Last Updated: 2024-08-01T20:55:09.904Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Laundry Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263894 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CI
the public and may be used. VDB-263894 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263894 - https://vuldb.com/?ctiid.263894 - https://vuldb.com/?submit.332537 - https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_user.md
CVE ID: CVE-2024-4796 State: PUBLISHED Published: 2024-05-12T06:31:04.682Z Last Updated: 2024-08-01T20:55:08.758Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Laundry Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown part of the file /manage_inv.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263895. Additional Analyst Notes: - CISA
public and may be used. The associated identifier of this vulnerability is VDB-263895. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263895 - https://vuldb.com/?ctiid.263895 - https://vuldb.com/?submit.332538 - https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_inv.md
CVE ID: CVE-2024-4797 State: PUBLISHED Published: 2024-05-12T07:31:04.239Z Last Updated: 2024-08-01T20:55:08.797Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Online Laundry Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ajax.php. The manipulation of the argument name/customer_name/username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263896. Additional Analyst
has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263896. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263896 - https://vuldb.com/?ctiid.263896 - https://vuldb.com/?submit.332539 - https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/xss_action.md
CVE ID: CVE-2024-4798 State: PUBLISHED Published: 2024-05-12T13:31:04.420Z Last Updated: 2024-08-01T20:55:08.806Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/manage_brand.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263918 is the identifier assigned to this vul
emotely. The exploit has been disclosed to the public and may be used. VDB-263918 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263918 - https://vuldb.com/?ctiid.263918 - https://vuldb.com/?submit.332784 - https://github.com/Hefei-Coffee/cve/blob/main/sql5.md
CVE ID: CVE-2024-4799 State: PUBLISHED Published: 2024-05-12T18:31:04.244Z Last Updated: 2024-08-01T20:55:09.335Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: College Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. This affects an unknown part of the file view_each_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263919. Additional Analyst Notes: - CISA ADP Vulnr
d may be used. The associated identifier of this vulnerability is VDB-263919. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263919 - https://vuldb.com/?ctiid.263919 - https://vuldb.com/?submit.332544 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%202.pdf
CVE ID: CVE-2024-4800 State: PUBLISHED Published: 2024-05-12T21:31:04.434Z Last Updated: 2024-08-01T20:55:09.491Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: College Management System Problem Types: CWE-89 Description: A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file submit_student.php. The manipulation of the argument date_of_birth leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263920. Additional Analyst Notes: - CISA ADP Vulnrichme
lic and may be used. The identifier of this vulnerability is VDB-263920. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263920 - https://vuldb.com/?ctiid.263920 - https://vuldb.com/?submit.332545 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%203.pdf
CVE ID: CVE-2024-4801 State: PUBLISHED Published: 2024-05-12T22:00:04.888Z Last Updated: 2024-08-01T20:55:09.629Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: College Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara College Management System 1.0 and classified as critical. This issue affects some unknown processing of the file submit_new_faculty.php. The manipulation of the argument address leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263921 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vuln
and may be used. The identifier VDB-263921 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263921 - https://vuldb.com/?ctiid.263921 - https://vuldb.com/?submit.332552 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%204.pdf
CVE ID: CVE-2024-4802 State: PUBLISHED Published: 2024-05-12T22:31:04.143Z Last Updated: 2024-08-01T20:55:09.338Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: College Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submit_extracurricular_activity.php. The manipulation of the argument activity_datetime leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263922 is the identifier assigned to this vulnerability. Additional An
been disclosed to the public and may be used. VDB-263922 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263922 - https://vuldb.com/?ctiid.263922 - https://vuldb.com/?submit.332553 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%205.pdf
CVE ID: CVE-2024-4803 State: PUBLISHED Published: 2024-05-12T22:31:05.528Z Last Updated: 2024-08-01T20:55:10.202Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: College Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara College Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file submit_admin.php. The manipulation of the argument phone leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263923. Additional Analyst Notes:
to the public and may be used. The associated identifier of this vulnerability is VDB-263923. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263923 - https://vuldb.com/?ctiid.263923 - https://vuldb.com/?submit.332554 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%206.pdf
CVE ID: CVE-2024-4804 State: PUBLISHED Published: 2024-05-12T23:00:05.073Z Last Updated: 2024-08-01T20:55:09.535Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: College Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara College Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file edit_user.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263924. Additional Analyst Notes: - CISA ADP Vulnrichment: -
nd may be used. The identifier of this vulnerability is VDB-263924. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263924 - https://vuldb.com/?ctiid.263924 - https://vuldb.com/?submit.332555 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%207.pdf
CVE ID: CVE-2024-4805 State: PUBLISHED Published: 2024-05-12T23:00:07.015Z Last Updated: 2024-08-01T20:55:09.926Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: College Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file edit_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263925 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CV
d. The identifier VDB-263925 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263925 - https://vuldb.com/?ctiid.263925 - https://vuldb.com/?submit.332556 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%208.pdf