Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE Program Container: References: - https://vuldb.com/?id.236208 - https://vuldb.com/?ctiid.236208 - http://packetstormsecurity.com/files/174016/mooSocial-3.1.8-Cross-Site-Scripting.html
CVE ID: CVE-2023-4174 State: PUBLISHED Published: 2023-08-06T00:31:03.155Z Last Updated: 2024-10-09T18:19:44.826Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooStore Problem Types: CWE-79 Description: A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-236209 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.236209 - https://vuldb.com/?ctiid.236209 - http://pack
ner: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.236209 - https://vuldb.com/?ctiid.236209 - http://packetstormsecurity.com/files/174017/Social-Commerce-3.1.6-Cross-Site-Scripting.html
CVE ID: CVE-2023-4175 State: PUBLISHED Published: 2023-08-06T01:31:03.903Z Last Updated: 2024-08-02T07:17:12.162Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooTravel Problem Types: CWE-79 Description: A vulnerability was found in mooSocial mooTravel 3.1.8 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-236210 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236210 - https://vuldb.com/?ctiid.236210
CVE ID: CVE-2023-4176 State: PUBLISHED Published: 2023-08-06T02:00:04.810Z Last Updated: 2024-08-02T07:17:12.009Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Hospital Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file appointmentapproval.php. The manipulation of the argument time leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236211. Additional Analyst Notes:
to the public and may be used. The associated identifier of this vulnerability is VDB-236211. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236211 - https://vuldb.com/?ctiid.236211 - https://github.com/ayjmytks/Hos-System/blob/main/Hospital%20Management%20System%20appointmentapproval.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-4177 State: PUBLISHED Published: 2023-08-06T06:31:03.029Z Last Updated: 2024-08-02T07:17:12.141Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: EmpowerID Problem Types: CWE-200 Description: A vulnerability was found in EmpowerID up to 7.205.0.0. It has been rated as problematic. This issue affects some unknown processing of the component Multi-Factor Authentication Code Handler. The manipulation leads to information disclosure. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 7.205.0.1 is able to address this issue. It is recommended to upgrade the affected component. The
. Upgrading to version 7.205.0.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-236213 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236213 - https://vuldb.com/?ctiid.236213 - https://seclists.org/fulldisclosure/2023/Aug/3
CVE ID: CVE-2023-4178 State: PUBLISHED Published: 2023-09-05T18:49:53.022Z Last Updated: 2024-09-30T17:38:59.530Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Neutron Products: Neutron Smart VMS Problem Types: CWE-290 Description: Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass.This issue affects Neutron Smart VMS: before b1130.1.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0496
CVE ID: CVE-2023-4179 State: PUBLISHED Published: 2023-08-06T07:31:03.191Z Last Updated: 2024-08-02T07:17:11.941Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected is an unknown function of the file /vm/doctor/doctors.php?action=view. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-236214 is the identifier assigne
the attack remotely. The exploit has been disclosed to the public and may be used. VDB-236214 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236214 - https://vuldb.com/?ctiid.236214 - https://github.com/Yesec/Free-Hospital-Management-System-for-Small-Practices/blob/main/SQL%20Injection%20in%20doctors.php/vuln.md
CVE ID: CVE-2023-4180 State: PUBLISHED Published: 2023-08-06T08:00:06.055Z Last Updated: 2024-08-02T07:17:12.155Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file /vm/login.php. The manipulation of the argument useremail/userpassword leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifie
attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236215. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236215 - https://vuldb.com/?ctiid.236215 - https://github.com/Yesec/Free-Hospital-Management-System-for-Small-Practices/blob/main/SQL%20Injection%20in%20login.php/vuln.md
CVE ID: CVE-2023-4181 State: PUBLISHED Published: 2023-08-06T08:31:03.383Z Last Updated: 2024-08-02T07:17:12.174Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-841 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this issue is some unknown functionality of the file /vm/admin/delete-doctor.php?id=2 of the component Redirect Handler. The manipulation leads to enforcement of behavioral workflow. The attack may be launched remotely. The exploit has been disclosed to the p
eads to enforcement of behavioral workflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-236216. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236216 - https://vuldb.com/?ctiid.236216 - https://github.com/Yesec/Free-Hospital-Management-System-for-Small-Practices/blob/main/vertical%20privilege%20escalation/vuln.md
CVE ID: CVE-2023-4182 State: PUBLISHED Published: 2023-08-06T10:00:04.423Z Last Updated: 2024-08-02T07:17:12.190Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file edit_sell.php. The manipulation of the argument up_pid leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-236217 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236217 -
d to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236217 - https://vuldb.com/?ctiid.236217
CVE ID: CVE-2023-4183 State: PUBLISHED Published: 2023-08-06T11:00:06.122Z Last Updated: 2024-08-02T07:17:12.160Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-284 Description: A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit_update.php of the component Password Handler. The manipulation of the argument user_id leads to improper access controls. The attack can be initiated remotely. VDB-236218 is the identifier assigned to this vulnerability. Additional Analyst Notes:
attack can be initiated remotely. VDB-236218 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236218 - https://vuldb.com/?ctiid.236218
CVE ID: CVE-2023-4184 State: PUBLISHED Published: 2023-08-06T11:31:03.238Z Last Updated: 2024-08-02T07:17:12.061Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sell_return.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-236219. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236219 - htt
ility is VDB-236219. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236219 - https://vuldb.com/?ctiid.236219
CVE ID: CVE-2023-4185 State: PUBLISHED Published: 2023-08-06T13:00:06.934Z Last Updated: 2024-08-02T07:17:12.148Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Hospital Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Hospital Management System 1.0. It has been classified as critical. Affected is an unknown function of the file patientlogin.php. The manipulation of the argument loginid/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-236220. Additional Analy
t has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-236220. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236220 - https://vuldb.com/?ctiid.236220 - https://github.com/Yusoyea/VulList/blob/main/Hospital%20Management%20System%20patientlogin.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-4186 State: PUBLISHED Published: 2023-08-06T13:31:03.077Z Last Updated: 2024-10-09T18:18:09.762Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Pharmacy Management System Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Pharmacy Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_website.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236221 was assigned to this vulnerability. Additional Analyst Notes: -
o the public and may be used. The identifier VDB-236221 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.236221 - https://vuldb.com/?ctiid.236221 - https://github.com/E1even-321/Pharmacy-system/blob/main/Pharmacy%20Management%20System%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf
CVE ID: CVE-2023-4187 State: PUBLISHED Published: 2023-08-05T17:17:59.755Z Last Updated: 2024-10-09T18:44:07.718Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: instantsoft Products: instantsoft/icms2 Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/14941381-b669-4756-94fc-cce172472f8b - https://github.com/instantsoft/icms2/commit/1dbc3e6c8fbf5d2dc551cb27fad0de3584dee40f
CVE ID: CVE-2023-4188 State: PUBLISHED Published: 2023-08-05T19:10:37.764Z Last Updated: 2024-10-09T18:41:52.449Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: instantsoft Products: instantsoft/icms2 Problem Types: CWE-89 Description: SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1-git. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/fe9809b6-40ad-4e81-9197-a9aa42e8a7bf - https://github.com/instantsoft/icms2/commit/1dbc3e6c8fbf5d2dc551cb27fad0de3584dee40f
CVE ID: CVE-2023-4189 State: PUBLISHED Published: 2023-08-05T19:17:54.146Z Last Updated: 2024-10-09T18:33:19.405Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: instantsoft Products: instantsoft/icms2 Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/b00e6986-64e7-464e-ba44-e42476bfcdc4 - https://github.com/instantsoft/icms2/commit/1dbc3e6c8fbf5d2dc551cb27fad0de3584dee40f
CVE ID: CVE-2023-4190 State: PUBLISHED Published: 2023-08-06T00:00:20.469Z Last Updated: 2024-10-09T18:21:42.840Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: admidio Products: admidio/admidio Problem Types: CWE-613 Description: Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/71bc75d2-320c-4332-ad11-9de535a06d92 - https://github.com/admidio/admidio/commit/391fb2af5bee641837a58e7dd66ff76eac92bb74
CVE ID: CVE-2023-4191 State: PUBLISHED Published: 2023-08-06T23:00:05.852Z Last Updated: 2024-10-09T18:15:24.321Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Resort Reservation System Problem Types: CWE-73 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-236234 is the identifier assigned to this vulnerability. Additional Analyst Notes:
ed to the public and may be used. VDB-236234 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.236234 - https://vuldb.com/?ctiid.236234 - https://github.com/Yesec/Resort-Reservation-System/blob/main/local%20file%20inclusion/vuln.md
CVE ID: CVE-2023-4192 State: PUBLISHED Published: 2023-08-06T23:31:03.300Z Last Updated: 2024-08-02T07:17:12.207Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Resort Reservation System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Resort Reservation System 1.0. This affects an unknown part of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236235. Additional Analyst Notes: - CVE Progra
c and may be used. The associated identifier of this vulnerability is VDB-236235. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236235 - https://vuldb.com/?ctiid.236235 - https://github.com/Yesec/Resort-Reservation-System/blob/main/SQL%20Injection%20in%20manage_user.php/vuln.md
CVE ID: CVE-2023-4193 State: PUBLISHED Published: 2023-08-07T00:00:08.095Z Last Updated: 2024-08-02T07:17:12.217Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Resort Reservation System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Resort Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_fee.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-236236. Additional Analyst Notes: - CVE Program Container: Ref
may be used. The identifier of this vulnerability is VDB-236236. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236236 - https://vuldb.com/?ctiid.236236 - https://github.com/Yesec/Resort-Reservation-System/blob/main/SQL%20Injection%20in%20view_fee.php/vuln.md
CVE ID: CVE-2023-4194 State: PUBLISHED Published: 2023-08-07T13:19:44.215Z Last Updated: 2025-11-14T14:26:31.571Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Virtualization 4 Problem Types: CWE-863 Description: A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tu
fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6583 - https://access.redhat.com/security/cve/CVE-2023-4194 - https://bugzilla.redhat.com/show_bug.cgi?id=2229498 - https://lore.kernel.org/all/20230731164237.48365-1-lersek@redhat.com/ - https://lore.kernel.org/all/20230731164237.48365-2-lerse
lore.kernel.org/all/20230731164237.48365-1-lersek@redhat.com/ - https://lore.kernel.org/all/20230731164237.48365-2-lersek@redhat.com/ - https://lore.kernel.org/all/20230731164237.48365-3-lersek@redhat.com/
CVE ID: CVE-2023-4195 State: PUBLISHED Published: 2023-08-06T17:02:14.990Z Last Updated: 2024-10-09T18:17:36.026Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-98 Description: PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0bd5da2f-0e29-47ce-90f3-06518656bfd6 - https://github.com/cockpit-hq/cockpit/commit/800c05f1984db291769ffa5fdfb1d3e50968e95b
CVE ID: CVE-2023-4196 State: PUBLISHED Published: 2023-08-06T17:32:11.398Z Last Updated: 2024-10-09T18:16:38.726Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/c275a2d4-721f-49f7-8787-b146af2056a0 - https://github.com/cockpit-hq/cockpit/commit/039a00cc310bff128ca6e6c1c46c6fbad0385c2c
CVE ID: CVE-2023-4197 State: PUBLISHED Published: 2023-11-01T07:58:56.679Z Last Updated: 2024-09-05T19:57:29.722Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dolibarr Products: Dolibarr ERP CRM Problem Types: CWE-20 Description: Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-4197 - https://github.com/Dolibarr/dolibarr/commit/0ed6a63fb06be88be5a4f8bcdee83185eee4087e
CVE ID: CVE-2023-4198 State: PUBLISHED Published: 2023-11-01T08:01:16.469Z Last Updated: 2024-09-05T19:56:33.124Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dolibarr Products: Dolibarr ERP CRM Problem Types: CWE-862 Description: Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-4198 - https://github.com/Dolibarr/dolibarr/commit/3065b9ca6ade988e8d7a8a8550415c0abb56b9cb#diff-7d68365a708c954051853ade884c7e97c6ff13150ee92657d6ffc8603e0f9
ibarr/commit/3065b9ca6ade988e8d7a8a8550415c0abb56b9cb#diff-7d68365a708c954051853ade884c7e97c6ff13150ee92657d6ffc8603e0f947b
CVE ID: CVE-2023-4199 State: PUBLISHED Published: 2023-08-07T17:31:03.682Z Last Updated: 2024-08-02T07:17:12.328Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236289 was assigned to this vulnerability. Additional Analyst
sclosed to the public and may be used. The identifier VDB-236289 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236289 - https://vuldb.com/?ctiid.236289 - https://github.com/Yesec/Inventory-Management-System/blob/main/SQL%20Injection%20in%20catagory_data.php/vuln.md
CVE ID: CVE-2023-4200 State: PUBLISHED Published: 2023-08-07T18:31:03.795Z Last Updated: 2024-08-02T07:17:12.203Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file product_data.php.. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-236290 is the identifier assigned to this vulnerability. Additional Analyst Not
losed to the public and may be used. VDB-236290 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236290 - https://vuldb.com/?ctiid.236290 - https://github.com/Yesec/Inventory-Management-System/blob/main/SQL%20Injection%20in%20product_data.php/vuln.md