Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2191 State: PUBLISHED Published: 2025-03-11T12:00:07.620Z Last Updated: 2025-03-11T13:14:25.099Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Claro Products: A7600-A1 Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16_v2110403_CLA_32_160817. Affected by this issue is some unknown functionality of the file /form2pingv6.cgi of the component Ping6 Diagnóstico. The manipulation of the argument ip6addr with the input <img/src/onerror=prompt(8)> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299216 - https://vuldb.com/?ctiid.299216 - https://vuldb.com/?submit.511700
CVE ID: CVE-2025-2192 State: PUBLISHED Published: 2025-03-11T13:00:08.465Z Last Updated: 2025-03-11T13:50:51.697Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Stoque Products: Zeev.it Problem Types: CWE-918 Description: A vulnerability, which was classified as problematic, was found in Stoque Zeev.it 4.24. This affects an unknown part of the file /Login?inpLostSession=1 of the component Login Page. The manipulation of the argument inpRedirectURL leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not
loit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299217 - https://vuldb.com/?ctiid.299217 - https://vuldb.com/?submit.511708 - https://drive.google.com/file/d/17QAEbzVIjTUj8FDOVMwfl9-7j8LRcK4V/view?usp=sharing
CVE ID: CVE-2025-2193 State: PUBLISHED Published: 2025-03-11T13:00:11.512Z Last Updated: 2025-03-11T13:48:35.293Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: n/a Products: MRCMS Problem Types: CWE-22 Description: A vulnerability has been found in MRCMS 3.1.2 and classified as critical. This vulnerability affects the function delete of the file /admin/file/delete.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path/name leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way
losed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299218 - https://vuldb.com/?ctiid.299218 - https://vuldb.com/?submit.511724 - https://github.com/IceFoxH/VULN/issues/1
CVE ID: CVE-2025-2194 State: PUBLISHED Published: 2025-03-11T13:31:04.585Z Last Updated: 2025-03-11T13:39:15.592Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: MRCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in MRCMS 3.1.2 and classified as problematic. This issue affects the function list of the file /admin/file/list.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addit
o the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299219 - https://vuldb.com/?ctiid.299219 - https://vuldb.com/?submit.511732 - https://github.com/IceFoxH/VULN/issues/3
CVE ID: CVE-2025-2195 State: PUBLISHED Published: 2025-03-11T13:31:06.152Z Last Updated: 2025-03-11T13:38:45.234Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: MRCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is the function rename of the file /admin/file/rename.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument name/path leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respon
as been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299220 - https://vuldb.com/?ctiid.299220 - https://vuldb.com/?submit.511733 - https://github.com/IceFoxH/VULN/issues/4
CVE ID: CVE-2025-2196 State: PUBLISHED Published: 2025-03-11T14:00:10.152Z Last Updated: 2025-03-11T14:48:51.384Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: MRCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in MRCMS 3.1.2. It has been declared as problematic. Affected by this vulnerability is the function upload of the file /admin/file/upload.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not
loit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299221 - https://vuldb.com/?ctiid.299221 - https://vuldb.com/?submit.511735 - https://github.com/IceFoxH/VULN/issues/5
CVE ID: CVE-2025-2197 State: PUBLISHED Published: 2025-04-17T09:25:46.870Z Last Updated: 2025-04-17T18:06:20.666Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Honor Products: com. hihonor.baidu.browser Description: Browser is affected by type confusion vulnerability, successful exploitation of this vulnerability may affect service availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2025-2197/
CVE ID: CVE-2025-2198 State: REJECTED Published: N/A Last Updated: 2025-03-20T22:15:58.687Z Description: No description available.
CVE ID: CVE-2025-2199 State: PUBLISHED Published: 2025-03-17T10:09:18.444Z Last Updated: 2025-03-17T12:28:01.452Z Vendors: Innovación y Cualificación Products: ajax.php plugin Problem Types: CWE-89 Description: SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to obtain, update and delete data from the database by injecting an SQL query in ‘searchActionsToUpdate’, ‘searchSpecialitiesPending’, ‘searchSpecialitiesLinked’, ‘searchUsersToUpdateProfile’, ‘training_action_data’, ‘showContinuingTrainingCourses’ and ‘showUsersToEdit’ in /local/administration/ajax.php. Additional Analyst Notes: - CISA ADP Vulnrich
gTrainingCourses’ and ‘showUsersToEdit’ in /local/administration/ajax.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-moodle-innovacion-y-cualificacion-plugins
CVE ID: CVE-2025-2200 State: PUBLISHED Published: 2025-03-17T10:09:49.433Z Last Updated: 2025-03-18T15:48:51.594Z Vendors: Innovación y Cualificación Products: IcProgreso plugin Problem Types: CWE-89 Description: SQL injection vulnerability in the IcProgreso Innovación y Cualificación plugin. This vulnerability allows an attacker to obtain, update and delete data from the database by injecting an SQL query on the parameters user, id, idGroup, start_date and end_date in the endpoint /report/icprogreso/generar_blocks.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-moodle-innovacion-y-cualificacion
erences: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-moodle-innovacion-y-cualificacion-plugins
CVE ID: CVE-2025-2201 State: PUBLISHED Published: 2025-03-17T10:13:48.361Z Last Updated: 2025-03-17T12:18:11.427Z Vendors: Innovación y Cualificación Products: IcProgreso plugin Problem Types: CWE-863 Description: Broken access control vulnerability in the IcProgress Innovación y Cualificación plugin. This vulnerability allows an attacker to obtain sensitive information about other users such as public IP addresses, messages with other users and more. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-moodle-innovacion-y-cualificacion-plugins
CVE ID: CVE-2025-2202 State: PUBLISHED Published: 2025-03-17T10:14:37.246Z Last Updated: 2025-03-17T12:15:05.683Z Vendors: Innovación y Cualificación Products: ajax.php plugin Problem Types: CWE-863 Description: Broken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to obtain sensitive information about other users such as id, name, login and email. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-moodle-innovacion-y-cualificacion-plugins
CVE ID: CVE-2025-2203 State: PUBLISHED Published: 2025-05-15T20:07:27.292Z Last Updated: 2025-05-16T18:36:31.787Z Vendors: Unknown Products: FunnelKit Problem Types: CWE-89 SQL Injection Description: The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d553cff4-074a-44e7-aebe-e61c86ab8042/
CVE ID: CVE-2025-2205 State: PUBLISHED Published: 2025-03-12T03:21:26.642Z Last Updated: 2025-03-12T13:41:08.562Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: mooveagency Products: GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice – CCPA, DSGVO, RGPD Problem Types: CWE-79 Description: The GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice – CCPA, DSGVO, RGPD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-le
icient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/37da32e4-48a1-4830-a47c-c454d60c9811?source=cve - https://wpscan.com/vulnerability/7a903d61-2792-4fe0-a26b-f400f4a3124b/ - https://research.cleantalk.org/cve-2025-1622/
CVE ID: CVE-2025-2206 State: PUBLISHED Published: 2025-03-11T20:00:08.940Z Last Updated: 2025-03-11T20:17:01.460Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: aitangbao Products: springboot-manager Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not res
e used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299277 - https://vuldb.com/?ctiid.299277 - https://vuldb.com/?submit.511736 - https://github.com/uglory-gll/javasec/blob/main/spring-manage.md
CVE ID: CVE-2025-2207 State: PUBLISHED Published: 2025-03-11T20:00:10.810Z Last Updated: 2025-03-11T20:06:40.141Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: aitangbao Products: springboot-manager Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in an
her parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299278 - https://vuldb.com/?ctiid.299278 - https://vuldb.com/?submit.511737 - https://github.com/uglory-gll/javasec/blob/main/spring-manage.md
CVE ID: CVE-2025-2208 State: PUBLISHED Published: 2025-03-11T20:31:04.351Z Last Updated: 2025-03-11T20:38:03.451Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: aitangbao Products: springboot-manager Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue affects some unknown processing of the file /sysFiles/upload of the component Filename Handler. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299279 - https://vuldb.com/?ctiid.299279 - https://vuldb.com/?submit.511738 - https://github.com/uglory-gll/javasec/blob/main/spring-manage.md
CVE ID: CVE-2025-2209 State: PUBLISHED Published: 2025-03-11T21:31:04.590Z Last Updated: 2025-03-12T14:05:27.195Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: aitangbao Products: springboot-manager Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did no
may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299280 - https://vuldb.com/?ctiid.299280 - https://vuldb.com/?submit.511739 - https://github.com/uglory-gll/javasec/blob/main/spring-manage.md
CVE ID: CVE-2025-2210 State: PUBLISHED Published: 2025-03-11T22:00:12.027Z Last Updated: 2025-03-12T13:51:09.150Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: aitangbao Products: springboot-manager Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /sysJob/add. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclos
he public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299281 - https://vuldb.com/?ctiid.299281 - https://vuldb.com/?submit.511740 - https://github.com/uglory-gll/javasec/blob/main/spring-manage.md
CVE ID: CVE-2025-2211 State: PUBLISHED Published: 2025-03-11T22:00:13.351Z Last Updated: 2025-03-12T13:46:59.731Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: aitangbao Products: springboot-manager Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sysDictDetail/add. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure
ublic and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299282 - https://vuldb.com/?ctiid.299282 - https://vuldb.com/?submit.511741 - https://github.com/uglory-gll/javasec/blob/main/spring-manage.md
CVE ID: CVE-2025-2212 State: PUBLISHED Published: 2025-03-11T22:31:04.054Z Last Updated: 2025-03-12T13:42:08.149Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Castlenet Products: CBW383G2N Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been classified as problematic. This affects an unknown part of the file /RgSwInfo.asp. The manipulation of the argument Description with the input <img/src/onerror=prompt(8)> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was cont
xploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299283 - https://vuldb.com/?ctiid.299283 - https://vuldb.com/?submit.511873
CVE ID: CVE-2025-2213 State: PUBLISHED Published: 2025-03-11T23:00:07.686Z Last Updated: 2025-03-12T13:41:14.626Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Castlenet Products: CBW383G2N Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. This vulnerability affects unknown code of the file /wlanPrimaryNetwork.asp of the component Wireless Menu. The manipulation of the argument SSID with the input <img/src/onerror=prompt(8)> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affe
can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299284 - https://vuldb.com/?ctiid.299284 - https://vuldb.com/?submit.511882
CVE ID: CVE-2025-2214 State: PUBLISHED Published: 2025-03-11T23:31:04.357Z Last Updated: 2025-03-12T13:37:18.961Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Microweber Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Microweber 2.0.19. It has been rated as problematic. This issue affects some unknown processing of the file userfiles/modules/settings/group/website_group/index.php of the component Settings Handler. The manipulation of the argument group leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
e exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299285 - https://vuldb.com/?ctiid.299285 - https://vuldb.com/?submit.512032 - https://github.com/Fewword/Poc/blob/main/microweber/mwb-poc1.md
CVE ID: CVE-2025-2215 State: PUBLISHED Published: 2025-03-11T23:31:05.962Z Last Updated: 2025-03-12T17:17:21.481Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: Doufox Problem Types: CWE-22 Description: A vulnerability classified as critical was found in Doufox up to 0.2.0. Affected by this vulnerability is an unknown functionality of the file /?s=doudou&c=file&a=list. The manipulation of the argument dir leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
acted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299287 - https://vuldb.com/?ctiid.299287 - https://vuldb.com/?submit.512316 - https://github.com/sate10/11/issues/1
CVE ID: CVE-2025-2216 State: PUBLISHED Published: 2025-03-12T00:00:09.848Z Last Updated: 2025-03-12T19:49:18.407Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zzskzy Products: Warehouse Refinement Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, has been found in zzskzy Warehouse Refinement Management System 1.3. Affected by this issue is the function UploadCrash of the file /crash/log/SaveCrash.ashx. The manipulation of the argument file leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this discl
remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299288 - https://vuldb.com/?ctiid.299288 - https://vuldb.com/?submit.512330 - https://github.com/f14g-orz/tmp/blob/main/3_.md
CVE ID: CVE-2025-2217 State: PUBLISHED Published: 2025-03-12T00:00:11.806Z Last Updated: 2025-03-12T16:19:57.861Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zzskzy Products: Warehouse Refinement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 1.3. This affects the function ProcessRequest of the file /getAdyData.ashx. The manipulation of the argument showid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not r