Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0252 State: PUBLISHED Published: 2024-01-11T07:57:12.987Z Last Updated: 2025-06-17T21:09:15.509Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ManageEngine Products: ADSelfService Plus Problem Types: CWE-94 Description: ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/self-service-password/advisory/CVE-2024-0252.html
CVE ID: CVE-2024-0253 State: PUBLISHED Published: 2024-02-02T12:50:35.088Z Last Updated: 2024-08-01T17:41:16.062Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2024-0254 State: PUBLISHED Published: 2024-02-05T21:21:33.210Z Last Updated: 2024-08-01T17:41:16.403Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: nomadcoder Products: (Simply) Guest Author Name Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The (Simply) Guest Author Name plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's post meta in all versions up to, and including, 4.34 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and abo
escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e9e2864-6624-497f-8bec-df8360ed3f4a?source=cve - https://plugins.trac.wordpress.org/browser/guest-author-name/trunk/sfly-guest-author.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3027723%40guest-author-name&new=3027723%40guest-author-name&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0255 State: PUBLISHED Published: 2024-02-05T21:21:44.818Z Last Updated: 2024-08-01T17:41:16.440Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brechtvds Products: WP Recipe Maker Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-recipe-text-share' shortcode in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above p
aping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/53a51408-e5d8-4727-9dec-8321c062c31e?source=cve - https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-icon.php#L52 - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/class-wprm-icon.php
CVE ID: CVE-2024-0256 State: PUBLISHED Published: 2024-02-07T04:31:24.549Z Last Updated: 2024-08-01T17:41:16.516Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cifi Products: Starbox – the Author Box for Humans Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Settings in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject
output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0eafe473-9177-47c4-aa1e-2350cb827447?source=cve - https://plugins.trac.wordpress.org/changeset/3029599/starbox
CVE ID: CVE-2024-0257 State: PUBLISHED Published: 2024-04-17T19:53:36.328Z Last Updated: 2024-08-20T15:52:19.013Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: RoboDK Products: RoboDK Problem Types: CWE-122 Description: RoboDK v5.5.4 is vulnerable to heap-based buffer overflow while processing a specific project file. The resulting memory corruption may crash the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-04
CVE ID: CVE-2024-0258 State: PUBLISHED Published: 2024-03-08T01:36:10.920Z Last Updated: 2025-11-04T18:22:25.367Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214086 - https://suppor
CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2024-0259 State: PUBLISHED Published: 2024-03-28T14:31:07.986Z Last Updated: 2024-08-01T17:41:16.446Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Fortra Products: Robot Schedule Enterprise Agent Problem Types: CWE-276 Description: Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ww
levated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.fortra.com/security/advisory/fi-2024-005 - https://hstechdocs.helpsystems.com/releasenotes/Content/_ProductPages/Robot/RobotScheduleEnterprise.htm
CVE ID: CVE-2024-0260 State: PUBLISHED Published: 2024-01-07T00:00:07.682Z Last Updated: 2025-06-17T20:29:14.573Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Engineers Online Portal Problem Types: CWE-613 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file change_password_teacher.php of the component Password Change. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-2498
remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249816. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249816 - https://vuldb.com/?ctiid.249816 - https://mega.nz/file/yEsSwK6D#--ygVt0NtzhZdqVxvjaPLCYfnIeBSyf76KaRozOxfVo
CVE ID: CVE-2024-0261 State: PUBLISHED Published: 2024-01-07T01:31:03.748Z Last Updated: 2025-06-03T14:40:31.879Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Sentex Products: FTPDMIN Problem Types: CWE-404 Description: A vulnerability has been found in Sentex FTPDMIN 0.96 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component RNFR Command Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249817 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - C
ed. The identifier VDB-249817 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249817 - https://vuldb.com/?ctiid.249817 - https://packetstormsecurity.com/files/176342/FTPDMIN-0.96-Denial-Of-Service.html - https://www.youtube.com/watch?v=q-CVJfYdd-g
CVE ID: CVE-2024-0262 State: PUBLISHED Published: 2024-01-07T02:00:05.187Z Last Updated: 2025-06-03T14:40:26.660Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: Online Job Portal Problem Types: CWE-79 Description: A vulnerability was found in Online Job Portal 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Admin/News.php of the component Create News Page. The manipulation of the argument News with the input </title><scRipt>alert(0x00C57D)</scRipt> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249818 is the identifier assigne
be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249818 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249818 - https://vuldb.com/?ctiid.249818 - https://mega.nz/file/zEsxyIYQ#re6pHT-2OGX9SNk1OpygDCQYu1RpBiOrQ_2QS6beRos
CVE ID: CVE-2024-0263 State: PUBLISHED Published: 2024-01-07T03:31:03.968Z Last Updated: 2024-09-04T19:38:47.773Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ACME Products: Ultra Mini HTTPd Problem Types: CWE-404 Description: A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-2498
used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-249819. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249819 - https://vuldb.com/?ctiid.249819 - https://packetstormsecurity.com/files/176333/Ultra-Mini-HTTPd-1.21-Denial-Of-Service.html - https://0day.today/exploit/description/39212 - https://www.youtube.com/watch?v=HWOGeg3e5As
CVE ID: CVE-2024-0264 State: PUBLISHED Published: 2024-01-07T04:31:03.572Z Last Updated: 2025-06-03T14:40:20.571Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Clinic Queuing System Problem Types: CWE-639 Description: A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /LoginRegistration.php. The manipulation of the argument formToken leads to authorization bypass. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249820. Additional Analyst Notes: - CVE Pro
d to the public and may be used. The identifier of this vulnerability is VDB-249820. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249820 - https://vuldb.com/?ctiid.249820 - https://github.com/jmrcsnchz/ClinicQueueingSystem_RCE/ - https://github.com/jmrcsnchz/ClinicQueueingSystem_RCE/blob/main/clinicx.py
CVE ID: CVE-2024-0265 State: PUBLISHED Published: 2024-01-07T05:00:04.362Z Last Updated: 2025-06-09T18:02:28.005Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Clinic Queuing System Problem Types: CWE-73 Description: A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component GET Parameter Handler. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249821 was assigned to this vulnerability. Additional
s been disclosed to the public and may be used. The identifier VDB-249821 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249821 - https://vuldb.com/?ctiid.249821 - https://github.com/jmrcsnchz/ClinicQueueingSystem_RCE - https://github.com/jmrcsnchz/ClinicQueueingSystem_RCE/blob/main/clinicx.py
CVE ID: CVE-2024-0266 State: PUBLISHED Published: 2024-01-07T05:31:03.312Z Last Updated: 2025-04-17T18:31:08.810Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Project Worlds Products: Online Lawyer Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the component User Registration. The manipulation of the argument First Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249822 is the identifier assigned to this vulnerability. Additional
s been disclosed to the public and may be used. VDB-249822 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249822 - https://vuldb.com/?ctiid.249822 - https://drive.google.com/file/d/1U60z1xzBzJjalbmwBmPD5NjJ4pPaDevF/view?usp=sharing
CVE ID: CVE-2024-0267 State: PUBLISHED Published: 2024-01-07T06:00:06.814Z Last Updated: 2025-06-17T20:29:14.703Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Kashipara Products: Hospital Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Parameter Handler. The manipulation of the argument email/password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-
y. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249823. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249823 - https://vuldb.com/?ctiid.249823 - https://github.com/E1CHO/cve_hub/blob/main/Hospital%20Managment%20System/Hospital%20Managment%20System%20-%20vuln%201.pdf
CVE ID: CVE-2024-0268 State: PUBLISHED Published: 2024-01-07T07:31:04.120Z Last Updated: 2025-06-17T20:29:14.837Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Kashipara Products: Hospital Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249824. Add
y. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249824. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249824 - https://vuldb.com/?ctiid.249824 - https://github.com/E1CHO/cve_hub/blob/main/Hospital%20Managment%20System/Hospital%20Managment%20System%20-%20vuln%202.pdf
CVE ID: CVE-2024-0269 State: PUBLISHED Published: 2024-02-02T13:05:35.762Z Last Updated: 2024-08-01T17:41:16.415Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2024-0270 State: PUBLISHED Published: 2024-01-07T08:00:04.999Z Last Updated: 2024-11-14T18:10:01.475Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file item_list_submit.php. The manipulation of the argument item_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249825 was assigned to this vulnerability. Additional Analyst Notes: - CVE Progr
lic and may be used. The identifier VDB-249825 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249825 - https://vuldb.com/?ctiid.249825 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%201.pdf
CVE ID: CVE-2024-0271 State: PUBLISHED Published: 2024-01-07T08:31:03.929Z Last Updated: 2025-06-06T20:01:04.596Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file addmaterial_edit.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249826 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Contain
ay be used. VDB-249826 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249826 - https://vuldb.com/?ctiid.249826 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%206.pdf
CVE ID: CVE-2024-0272 State: PUBLISHED Published: 2024-01-07T10:31:03.624Z Last Updated: 2025-05-16T15:48:51.620Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file addmaterialsubmit.php. The manipulation of the argument material_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249827. Additional Analyst Notes: - CVE Pro
blic and may be used. The associated identifier of this vulnerability is VDB-249827. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249827 - https://vuldb.com/?ctiid.249827 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%208.pdf
CVE ID: CVE-2024-0273 State: PUBLISHED Published: 2024-01-07T11:00:05.780Z Last Updated: 2025-06-03T14:39:56.548Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as critical. Affected is an unknown function of the file addwaste_entry.php. The manipulation of the argument item_name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249828. Additional Analyst Notes: - CVE Program Contain
lic and may be used. The identifier of this vulnerability is VDB-249828. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249828 - https://vuldb.com/?ctiid.249828 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%203.pdf
CVE ID: CVE-2024-0274 State: PUBLISHED Published: 2024-01-07T11:31:03.585Z Last Updated: 2025-06-03T14:39:50.259Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file billAjax.php. The manipulation of the argument item_name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249829 was assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. The identifier VDB-249829 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249829 - https://vuldb.com/?ctiid.249829 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%202.pdf
CVE ID: CVE-2024-0275 State: PUBLISHED Published: 2024-01-07T12:00:05.191Z Last Updated: 2024-09-04T19:36:56.526Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Kashipara Products: Food Management System Problem Types: CWE-89 Description: A vulnerability was found in Kashipara Food Management System up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file item_edit_submit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249830 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Prog
ublic and may be used. VDB-249830 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249830 - https://vuldb.com/?ctiid.249830 - https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%204.pdf