Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-28047 State: PUBLISHED Published: 2020-11-05T14:57:26 Last Updated: 2024-08-04T16:33:56.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter "unique_error_numbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/piuppi/Proof-of-Concepts/blob/main/AudimexEE/Reflected-XSS.md
CVE ID: CVE-2020-28049 State: PUBLISHED Published: 2020-11-04T00:00:00 Last Updated: 2024-10-15T18:10:25.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time period - allows local unprivileged users to create a connection to the X server without providing proper authentication. A local attacker can thus access X server display contents and, for example, intercept keystrokes or access the clipboard. This is caused by a race condition during Xauthority file creation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github
file creation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sddm/sddm/releases - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-28049 - https://github.com/sddm/sddm/blob/v0.19.0/ChangeLog - https://www.debian.org/security/2020/dsa-4783 - https://lists.debian.org/debian-lts-announce/2020/11/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GT3EX5NSQJJAKY63ENSMEDX6NYZLYY3S/ - https://security.gentoo.org/glsa/202402-02
CVE ID: CVE-2020-28050 State: PUBLISHED Published: 2021-03-05T16:36:50 Last Updated: 2024-08-04T16:33:56.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/desktop-central/fixing-multiple-vulnerabilities.html - https://www.manageengine.com/products/desktop-central/cve-2020-28050.html
CVE ID: CVE-2020-28052 State: PUBLISHED Published: 2020-12-18T00:52:48 Last Updated: 2024-08-04T16:33:56.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different. Additional Analyst Notes: - CVE Program Container: References: - https://www.bouncycastle.org/releasenotes.html - https://lists.apache.org/thread.html/r954d80fd18e9dafef6e813963eb7e08c228151c2b6268ecd63b35d1f%40%3Ccommits.druid.apache.org%3E - h
ts.apache.org/thread.html/r954d80fd18e9dafef6e813963eb7e08c228151c2b6268ecd63b35d1f%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/rddd2237b8636a48d573869006ee809262525efb2b6ffa6eff50d2a2d%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r25d53acd06f29244b8a103781b0339c5e7efee9099a4d52f0c230e4a%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r175f5a25d100dbe2b1bd3459b3ce882a84c3ff91b120ed4ff2d57b53%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rdfd2901b8b697a3f6e2c9c6ecc688fd90d7f881937affb5144d61d6e%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r37d332c0bf772f4982d1fdeeb
f881937affb5144d61d6e%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r37d332c0bf772f4982d1fdeeb2f88dd71dab6451213e69e43734eadc%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e%40%3Cissues.solr.apache.org%3E - https://www.oracle.com/security-alerts/cpuApr2021.html - https://github.com/bcgit/bc-java/wiki/CVE-2020-28052 - https://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://lists.apache.org/thread.html/rdcbad6d8ce72c79827ed8c635f9a62dd919bb21c94a0b64cab2efc31%40%3Cissues.karaf.apache.org%3E - http
.apache.org/thread.html/rdcbad6d8ce72c79827ed8c635f9a62dd919bb21c94a0b64cab2efc31%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/rfc0db1f3c375087e69a239f9284ded72d04fbb55849eadde58fa9dc2%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/r77af3ac7c3bfbd5454546e13faf7aec21d627bdcf36c9ca240436b94%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/rcd37d9214b08067a2e8f2b5b4fd123a1f8cb6008698d11ef44028c21%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c25208229993d6206fe%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5
5208229993d6206fe%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5c9229eef907bd5d8ef14c594fc%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/r2ddabd06d94b60cfb0141e4abb23201c628ab925e30742f61a04d013%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab1550534011b1fdfcd2f5d95892c5b%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/rf9abfc0223747a56694825c050cc6b66627a293a32ea926b3de22402%40%3Cissues.karaf.apache.org%3E - https://lists.apache.org/thread.html/rc9e441c1576bdc4375d32526d5cf457226928e9c87b9f54ded26271c%40%3Cissues.karaf.apache.org%3E - htt
s.apache.org/thread.html/rc9e441c1576bdc4375d32526d5cf457226928e9c87b9f54ded26271c%40%3Cissues.karaf.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2020-28053 State: PUBLISHED Published: 2020-11-23T13:11:27 Last Updated: 2024-08-04T16:33:56.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.hashicorp.com/blog/category/consul - https://github.com/hashicorp/consul/blob/master/CHANGELOG.md#186-november-19-2020 - https://security.gentoo.org/glsa/202208-09
CVE ID: CVE-2020-28054 State: PUBLISHED Published: 2020-11-19T15:15:55 Last Updated: 2024-08-04T16:33:56.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: JamoDat TSMManager Collector version up to 6.5.0.21 is vulnerable to an Authorization Bypass because the Collector component is not properly validating an authenticated session with the Viewer. If the Viewer has been modified (binary patched) and the Bypass Login functionality is being used, an attacker can request every Collector's functionality as if they were a properly logged-in user: administrating connected instances, reviewing logs, editing configurations, accessing the instances' consoles, accessing hardware configura
ected instances, reviewing logs, editing configurations, accessing the instances' consoles, accessing hardware configurations, etc.Exploiting this vulnerability won't grant an attacker access nor control on remote ISP servers as no credentials is sent with the request. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com - https://tsmmanager.com - https://voidsec.com/tivoli-madness/
CVE ID: CVE-2020-28055 State: PUBLISHED Published: 2020-11-10T17:53:07 Last Updated: 2024-08-04T16:33:57.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a malicious App, to read & write to the /data/vendor/tcl, /data/vendor/upgrade, and /var/TerminalManager directories within the TV file system. An attacker, such as a malicious APK or local unprivileged user could perform fake system upgrades by writing to the /data/vendor/upgrage folder. Additional Analyst Notes: - CVE Program Cont
perform fake system upgrades by writing to the /data/vendor/upgrage folder. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/sickcodes/ - https://twitter.com/johnjhacking/ - https://sick.codes/extraordinary-vulnerabilities-discovered-in-tcl-android-tvs-now-worlds-3rd-largest-tv-manufacturer/ - https://github.com/sickcodes/security/blob/master/advisories/SICK-2020-012.md - https://sick.codes/sick-2020-012 - https://github.com/sickcodes/security/blob/master/etc/CVE-2020-27403_CVE-2020-28055_Press-Statement-and-Questions_11162020.pdf - https://github.com/sickcodes/security/blob/master/etc/CVE-2020-27403_CVE-2020-28055_GlobalFAQ.pdf - https://securityledger.co
://github.com/sickcodes/security/blob/master/etc/CVE-2020-27403_CVE-2020-28055_GlobalFAQ.pdf - https://securityledger.com/2020/11/security-holes-opened-back-door-to-tcl-android-smart-tvs/ - https://securityledger.com/2020/11/tv-maker-tcl-denies-back-door-promises-better-process/ - https://support.tcl.com/vulnerabilities-found-in-tcl-android-tvs
CVE ID: CVE-2020-28062 State: PUBLISHED Published: 2022-04-04T16:36:44 Last Updated: 2024-08-04T16:33:56.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hisiphp/hisiphp/issues/10
CVE ID: CVE-2020-28063 State: PUBLISHED Published: 2021-05-13T14:07:35 Last Updated: 2024-08-04T16:33:56.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/woider/ArticleCMS/issues/8
CVE ID: CVE-2020-28070 State: PUBLISHED Published: 2020-12-23T17:54:16 Last Updated: 2024-08-04T16:33:57.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/160583/Alumni-Management-System-1.0-Blind-SQL-Injection.html
CVE ID: CVE-2020-28071 State: PUBLISHED Published: 2020-12-23T17:54:20 Last Updated: 2024-08-04T16:33:56.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/160591/Alumni-Management-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2020-28072 State: PUBLISHED Published: 2020-12-15T20:48:08 Last Updated: 2024-08-04T16:33:57.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/160508/Alumni-Management-System-1.0-Shell-Upload.html
CVE ID: CVE-2020-28073 State: PUBLISHED Published: 2020-12-23T17:54:23 Last Updated: 2024-08-04T16:33:57.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html - http://packetstormsecurity.com/files/160606/Library-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2020-28074 State: PUBLISHED Published: 2020-12-23T17:54:26 Last Updated: 2024-08-04T16:33:57.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Online Health Care System 1.0 is affected by SQL Injection which allows a potential attacker to bypass the authentication system and become an admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14526/online-health-care-system-php-full-source-code-2020.html - http://packetstormsecurity.com/files/160599/Online-Health-Card-System-1.0-SQL-Injection.html
CVE ID: CVE-2020-28086 State: PUBLISHED Published: 2020-12-09T18:09:51 Last Updated: 2024-08-04T16:33:57.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, and also controls one of the services already in the password store, they can rename one of the password files in the Git repository to something else: pass doesn't correctly verify that the content of a file matches the filename, so a
he Git repository to something else: pass doesn't correctly verify that the content of a file matches the filename, so a user might be tricked into decrypting the wrong password and sending that to a service that the attacker controls. NOTE: for environments in which this threat model is of concern, signing commits can be a solution. Additional Analyst Notes: - CVE Program Container: References: - https://lists.zx2c4.com/pipermail/password-store/2014-March/000498.html
CVE ID: CVE-2020-28087 State: PUBLISHED Published: 2021-08-06T22:38:00 Last Updated: 2024-08-04T16:33:57.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhangdaiscott/jeecg-boot/issues/1887
CVE ID: CVE-2020-28088 State: PUBLISHED Published: 2021-08-06T22:38:30 Last Updated: 2024-08-04T16:33:57.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhangdaiscott/jeecg-boot/issues/1888
CVE ID: CVE-2020-28091 State: PUBLISHED Published: 2020-11-18T16:45:02 Last Updated: 2024-08-04T16:33:57.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cbkhwx/cxuucmsv3/issues/1 - http://packetstormsecurity.com/files/160129/xuucms-3-SQL-Injection.html
CVE ID: CVE-2020-28092 State: PUBLISHED Published: 2020-11-17T21:44:09 Last Updated: 2024-08-04T16:33:57.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id= Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lazyphp/PESCMS-TEAM/issues/6 - http://packetstormsecurity.com/files/160128/PESCMS-TEAM-2.3.2-Cross-Site-Scripting.html
CVE ID: CVE-2020-28093 State: PUBLISHED Published: 2020-12-28T06:21:34 Last Updated: 2024-08-04T16:33:57.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, admin, support, user, and nobody have a password of 1234. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cecada/Tenda-AC6-Root-Acces/blob/main/README.md
CVE ID: CVE-2020-28094 State: PUBLISHED Published: 2020-12-28T06:23:45 Last Updated: 2024-08-04T16:33:57.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cecada/Tenda-AC6-Root-Acces/blob/main/README.md
CVE ID: CVE-2020-28095 State: PUBLISHED Published: 2020-12-30T20:53:45 Last Updated: 2024-08-04T16:33:57.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cecada/Tenda-AC6-Root-Acces/blob/main/README.md
CVE ID: CVE-2020-28096 State: PUBLISHED Published: 2020-12-28T06:28:56 Last Updated: 2024-08-04T16:33:57.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: FOSCAM FHD X1 1.14.2.4 devices allow attackers (with physical UART access) to login via the ipc.fos~ password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cecada/Foscam-Model-X1-Root-Access
CVE ID: CVE-2020-28097 State: PUBLISHED Published: 2021-06-24T12:00:43 Last Updated: 2024-08-04T16:33:57.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.10 - https://seclists.org/oss-sec/2020/q3/176 - https://github.com/torvalds/linux/commit/973c096f6a85e5b5f2a295126ba6928d9a6afd45 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=973c096f6a85e5b5f2a295126ba6928d9a6afd45
5 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=973c096f6a85e5b5f2a295126ba6928d9a6afd45 - https://security.netapp.com/advisory/ntap-20210805-0001/
CVE ID: CVE-2020-28102 State: PUBLISHED Published: 2022-01-11T15:41:34 Last Updated: 2024-08-04T16:33:57.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: cscms v4.1 allows for SQL injection via the "js_del" function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/9
CVE ID: CVE-2020-28103 State: PUBLISHED Published: 2022-01-11T15:49:49 Last Updated: 2024-08-04T16:33:57.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: cscms v4.1 allows for SQL injection via the "page_del" function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/8
CVE ID: CVE-2020-28115 State: PUBLISHED Published: 2020-11-05T14:58:48 Last Updated: 2024-08-04T16:33:57.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/piuppi/Proof-of-Concepts/blob/main/AudimexEE/README.md
CVE ID: CVE-2020-28119 State: PUBLISHED Published: 2021-10-04T16:59:40 Last Updated: 2024-08-04T16:33:57.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML statement inserted into chat window. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/i900008/panexiang.github.io/blob/gh-pages/CVE-2020-28119.md
CVE ID: CVE-2020-28124 State: PUBLISHED Published: 2021-04-14T17:04:48 Last Updated: 2024-08-04T16:33:57.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/418sec/huntr/tree/staging/bounties/packagist/lavalite/cms/3
CVE ID: CVE-2020-28129 State: PUBLISHED Published: 2020-11-17T20:15:30 Last Updated: 2024-08-04T16:33:57.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php?page=packages via vulnerable fields 'Package Name' and 'Description'. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14541/gym-management-system-using-phpmysqli-source-code.html - https://www.exploit-db.com/exploits/48941
CVE ID: CVE-2020-28130 State: PUBLISHED Published: 2020-11-17T20:17:59 Last Updated: 2024-08-04T16:33:57.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos (under the web root). Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html - https://www.exploit-db.com/exploits/48928
CVE ID: CVE-2020-28133 State: PUBLISHED Published: 2020-11-17T19:03:49 Last Updated: 2024-08-04T16:33:57.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14461/simple-grocery-store-sales-and-inventory-system-using-phpmysql-source-code.html - https://www.exploit-db.com/exploits/48879
CVE ID: CVE-2020-28136 State: PUBLISHED Published: 2020-11-17T19:06:21 Last Updated: 2024-08-04T16:33:57.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/tourism-management-system-free-download/ - https://www.exploit-db.com/exploits/48892
CVE ID: CVE-2020-28137 State: PUBLISHED Published: 2021-11-10T16:26:11 Last Updated: 2024-08-04T16:33:57.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by continuously restarting the router. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48972