Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6191 State: PUBLISHED Published: 2024-06-20T14:31:05.824Z Last Updated: 2024-08-01T21:33:04.955Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Student Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269163. Additional Analyst Notes:
to the public and may be used. The associated identifier of this vulnerability is VDB-269163. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269163 - https://vuldb.com/?ctiid.269163 - https://vuldb.com/?submit.359009 - https://github.com/HryspaHodor/CVE/issues/3
CVE ID: CVE-2024-6192 State: PUBLISHED Published: 2024-06-20T15:00:04.452Z Last Updated: 2024-08-01T21:33:05.136Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Loan Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269164. Additional Analyst Notes: - CISA ADP Vulnr
e public and may be used. The identifier of this vulnerability is VDB-269164. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269164 - https://vuldb.com/?ctiid.269164 - https://vuldb.com/?submit.359017 - https://github.com/HryspaHodor/CVE/issues/4
CVE ID: CVE-2024-6193 State: PUBLISHED Published: 2024-06-20T15:31:04.397Z Last Updated: 2024-08-01T21:33:04.690Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Vehicle Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of the file driverprofile.php. The manipulation of the argument driverid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269165 was assigned to this vulnerability. Additional Analyst Notes:
to the public and may be used. The identifier VDB-269165 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269165 - https://vuldb.com/?ctiid.269165 - https://vuldb.com/?submit.359018 - https://github.com/HryspaHodor/CVE/issues/5
CVE ID: CVE-2024-6194 State: PUBLISHED Published: 2024-06-20T15:31:06.025Z Last Updated: 2024-08-01T21:33:05.154Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Tailoring Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file editmeasurement.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-269166 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA AD
public and may be used. VDB-269166 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269166 - https://vuldb.com/?ctiid.269166 - https://vuldb.com/?submit.359019 - https://github.com/HryspaHodor/CVE/issues/6
CVE ID: CVE-2024-6195 State: PUBLISHED Published: 2024-06-20T16:00:05.278Z Last Updated: 2024-08-01T21:33:05.091Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Tailoring Management System Problem Types: CWE-89 Description: A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file orderadd.php. The manipulation of the argument customer leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269167. Additional Analyst
closed to the public and may be used. The associated identifier of this vulnerability is VDB-269167. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269167 - https://vuldb.com/?ctiid.269167 - https://vuldb.com/?submit.359127 - https://github.com/2768210355/cve/issues/2
CVE ID: CVE-2024-6196 State: PUBLISHED Published: 2024-06-20T16:00:07.459Z Last Updated: 2024-08-01T21:33:05.247Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Banking Management System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin_class.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269168. Additional Analyst Notes: - CISA ADP Vulnr
e public and may be used. The identifier of this vulnerability is VDB-269168. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269168 - https://vuldb.com/?ctiid.269168 - https://vuldb.com/?submit.359126 - https://github.com/2768210355/cve/issues/1
CVE ID: CVE-2024-6197 State: PUBLISHED Published: 2024-07-24T07:29:50.003Z Last Updated: 2025-02-13T17:54:41.039Z Vendors: curl Products: curl Problem Types: CWE-590 Free of Memory not on the Heap Description: libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also invokes `free()` on a 4 byte localstack buffer. Most modern malloc implementations detect this error and immediately abort. Some however accept the input pointer and add that memory to its list of available chunks. This leads to the overwriting of nearby stack memory. The content of the overwrite is decided by
st of available chunks. This leads to the overwriting of nearby stack memory. The content of the overwrite is decided by the `free()` implementation; likely to be memory pointers and a set of flags. The most likely outcome of exploting this flaw is a crash, although it cannot be ruled out that more serious results can be had in special circumstances. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://curl.se/docs/CVE-2024-6197.json - https://curl.se/docs/CVE-2024-6197.html - https://hackerone.com/reports/2559516 - http://www.openwall.com/lists/oss-security/2024/07/24/1 - http://www.openwall.com/lists/oss-security/2024/07/24/5
CVE ID: CVE-2024-6198 State: PUBLISHED Published: 2025-04-25T13:02:43.673Z Last Updated: 2025-05-08T03:56:03.465Z Vendors: ViaSat, Viasat Products: RM4100, RM4200, EM4100, RM5110, RM5111, RG1000, RG1100, EG1000, EG1020 Problem Types: CWE-120 Description: The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
request to exploit a buffer overflow on the modem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.onekey.com/resource/security-advisory-rce-on-viasat-modems-cve-2024-6198
CVE ID: CVE-2024-6199 State: PUBLISHED Published: 2025-04-25T13:02:50.214Z Last Updated: 2025-04-25T14:25:11.847Z Vendors: ViaSat, Viasat Products: RM5110, RM5111, RG1100, EG1000, EG1020 Problem Types: CWE-120 Description: An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. Customers that have not enabled Dynamic DNS on their modem are not vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.onekey.com/resource/security-advisory-rce-on-viasat-modems-cve-2024-6199
CVE ID: CVE-2024-6200 State: PUBLISHED Published: 2024-08-06T05:54:53.924Z Last Updated: 2024-08-08T17:39:07.431Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Halo Service Solutions Products: HaloITSM Problem Types: CWE-79 Description: HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. The injected JavaScript code can execute arbitrary action on behalf of the user accessing a ticket. HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://haloitsm.com/guides/article/?kbid=2152
CVE ID: CVE-2024-6201 State: PUBLISHED Published: 2024-08-06T05:59:29.627Z Last Updated: 2025-03-25T16:42:00.570Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Halo Service Solutions Products: HaloITSM Description: HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails. This can lead to the leakage of potentially sensitive information. HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://haloitsm.com/guides/article/?kbid=2153
CVE ID: CVE-2024-6202 State: PUBLISHED Published: 2024-08-06T06:01:41.415Z Last Updated: 2024-08-08T13:43:27.833Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Halo Service Solutions Products: HaloITSM Problem Types: CWE-863 Description: HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability. When having a SAML integration configured, anonymous actors could impersonate arbitrary HaloITSM users by just knowing their email address. HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://haloitsm.c
1 ) fix the mentioned vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://haloitsm.com/guides/article/?kbid=2154
CVE ID: CVE-2024-6203 State: PUBLISHED Published: 2024-08-06T06:03:11.225Z Last Updated: 2024-08-06T18:47:20.023Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: Halo Service Solutions Products: HaloITSM Problem Types: CWE-640 Description: HaloITSM versions up to 2.146.1 are affected by a Password Reset Poisoning vulnerability. Poisoned password reset links can be sent to existing HaloITSM users (given their email address is known). When these poisoned links get accessed (e.g. manually by the victim or automatically by an email client software), the password reset token is leaked to the malicious actor, allowing them to set a new password for the victim's acco
e), the password reset token is leaked to the malicious actor, allowing them to set a new password for the victim's account.This potentially leads to account takeover attacks.HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://haloitsm.com/guides/article/?kbid=2155
CVE ID: CVE-2024-6204 State: PUBLISHED Published: 2024-08-30T17:10:07.783Z Last Updated: 2024-08-30T18:05:36.513Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: Exchange Reporter Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-6204.html
CVE ID: CVE-2024-6205 State: PUBLISHED Published: 2024-07-19T06:00:06.257Z Last Updated: 2024-08-01T21:33:05.100Z Vendors: Unknown Products: PayPlus Payment Gateway Problem Types: CWE-89 SQL Injection Description: The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/7e2c5032-2917-418c-aee3-092bdb78a087/
CVE ID: CVE-2024-6206 State: PUBLISHED Published: 2024-06-25T20:05:26.968Z Last Updated: 2024-08-08T14:05:41.291Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Athonet Mobile Core Description: A security vulnerability has been identified in HPE Athonet Mobile Core software. The core application contains a code injection vulnerability where a threat actor could execute arbitrary commands with the privilege of the underlying container leading to complete takeover of the target system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docD
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04659en_us&docLocale=en_US
CVE ID: CVE-2024-6207 State: PUBLISHED Published: 2024-10-14T20:53:49.191Z Last Updated: 2024-10-15T14:43:19.768Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Rockwell Automation Products: ControlLogix® 5580, ControlLogix® 5580 Process, GuardLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, FactoryTalk® Logix Echo Problem Types: CWE-20 Description: CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end
rafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html
CVE ID: CVE-2024-6208 State: PUBLISHED Published: 2024-07-31T12:43:17.135Z Last Updated: 2024-07-31T16:33:02.522Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codename065 Products: Download Manager Problem Types: CWE-79 Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_all_packages' shortcode in all versions up to, and including, 3.2.97 due to insufficient input sanitization and output escaping on the 'cols' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user
ers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7c67d2f8-d918-42ef-a301-27eed7fa41b2?source=cve - https://plugins.trac.wordpress.org/browser/download-manager/trunk/src/Package/views/all-packages-shortcode.php?rev=3097323#L302 - https://plugins.trac.wordpress.org/browser/download-manager/trunk/src/Package/views/all-packages-shortcode.php?rev=3097323#L10 - https://plugins.trac.wordpress.org/changeset/3126662/
CVE ID: CVE-2024-6209 State: PUBLISHED Published: 2024-07-05T11:10:05.458Z Last Updated: 2024-12-05T12:13:47.544Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-552 Description: Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-6210 State: PUBLISHED Published: 2024-07-11T02:03:48.713Z Last Updated: 2024-08-01T21:33:04.961Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: smub Products: Duplicator – Migration & Backup Plugin Problem Types: CWE-200 Information Exposure Description: The Duplicator plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 1.5.9. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other vulnerabilities or to simplify reconnaissance work. On its own, this information is of very limited use. Additional Analyst Not
bilities or to simplify reconnaissance work. On its own, this information is of very limited use. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d47d582d-7c90-4f49-aee1-03a8775b850d?source=cve - https://plugins.trac.wordpress.org/browser/duplicator/trunk/installer/dup-installer/main.installer.php#L51 - https://plugins.trac.wordpress.org/changeset/3108563/duplicator/trunk/installer/dup-installer/main.installer.php?old=3073248&old_path=duplicator%2Ftrunk%2Finstaller%2Fdup-installer%2Fmain.installer.php
CVE ID: CVE-2024-6211 State: REJECTED Published: N/A Last Updated: 2025-10-13T20:57:18.282Z Description: No description available.
CVE ID: CVE-2024-6212 State: PUBLISHED Published: 2024-06-21T00:00:06.024Z Last Updated: 2024-08-01T21:33:05.336Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Student Attendance System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function get_student of the file student_form.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269276. Additional Analyst Note
een disclosed to the public and may be used. The identifier of this vulnerability is VDB-269276. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269276 - https://vuldb.com/?ctiid.269276 - https://vuldb.com/?submit.359229 - https://docs.google.com/document/d/1tl9-EAxUR64Og9zS-nyUx3YtG1V32Monkvq-h39tjpw/edit?usp=sharing
CVE ID: CVE-2024-6213 State: PUBLISHED Published: 2024-06-21T00:31:04.474Z Last Updated: 2024-08-01T21:33:05.089Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Food Ordering Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file login.php of the component Login Panel. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269277 was assigned to this vulner
ely. The exploit has been disclosed to the public and may be used. The identifier VDB-269277 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269277 - https://vuldb.com/?ctiid.269277 - https://vuldb.com/?submit.359574 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_Sqli.md
CVE ID: CVE-2024-6214 State: PUBLISHED Published: 2024-06-21T00:31:06.114Z Last Updated: 2024-08-01T21:33:05.377Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Food Ordering Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Food Ordering Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file add-item.php. The manipulation of the argument price leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-269278 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-269278 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269278 - https://vuldb.com/?ctiid.269278 - https://vuldb.com/?submit.359582 - https://github.com/jadu101/CVE/blob/main/SourceCoderster_Food_Ordering_Management_System_add_item_Sqli.md
CVE ID: CVE-2024-6215 State: PUBLISHED Published: 2024-06-21T01:00:04.802Z Last Updated: 2024-08-01T21:33:04.951Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Food Ordering Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the file view-ticket-admin.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269279. Additional Ana
n disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269279. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269279 - https://vuldb.com/?ctiid.269279 - https://vuldb.com/?submit.359595 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_view_ticket_admin_Sqli.md
CVE ID: CVE-2024-6216 State: PUBLISHED Published: 2024-06-21T01:31:03.622Z Last Updated: 2024-08-01T21:33:05.131Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Food Ordering Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file add-users.php. The manipulation of the argument contact leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269280. Additional Analyst Notes: - CISA ADP Vul