Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-11940 State: PUBLISHED Published: 2024-12-10T08:23:39.768Z Last Updated: 2024-12-10T15:10:03.238Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: propertyhive Products: Property Hive Mortgage Calculator Problem Types: CWE-79 Description: The Property Hive Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘price’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses
Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0f01f69e-0ff8-4771-9bf5-53ef78438cc2?source=cve - https://plugins.trac.wordpress.org/browser/property-hive-mortgage-calculator/tags/1.0.6/templates/mortgage-calculator.php - https://plugins.trac.wordpress.org/browser/property-hive-mortgage-calculator/tags/1.0.6/propertyhive-mortgage-calculator.php - https://wordpress.org/plugins/property-hive-mortgage-calculator/#developers - https://plugins.trac.wordpress.org/changeset/3202219/
CVE ID: CVE-2024-11941 State: PUBLISHED Published: 2024-12-05T14:39:37.975Z Last Updated: 2024-12-05T15:45:37.085Z Vendors: Drupal Products: Drupal Core Problem Types: CWE-835 Description: A vulnerability in Drupal Core allows Excessive Allocation.This issue affects Drupal Core: from 10.2.0 before 10.2.2, from 10.1.0 before 10.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-core-2024-001
CVE ID: CVE-2024-11942 State: PUBLISHED Published: 2024-12-05T14:42:07.812Z Last Updated: 2024-12-05T15:41:56.600Z Vendors: Drupal Products: Drupal Core Problem Types: CWE-390 Description: A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-core-2024-002
CVE ID: CVE-2024-11943 State: PUBLISHED Published: 2024-12-07T01:45:49.290Z Last Updated: 2024-12-09T18:04:14.364Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: codemstory Products: 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 Problem Types: CWE-79 Description: The 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.2.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
ripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3d85d609-781b-4f82-af57-124767f9d333?source=cve - https://plugins.trac.wordpress.org/browser/pgall-for-woocommerce/trunk/includes/admin/class-pafw-admin-notice.php#L81 - https://wordpress.org/plugins/pgall-for-woocommerce/#developers - https://plugins.trac.wordpress.org/changeset/3202085/
CVE ID: CVE-2024-11944 State: PUBLISHED Published: 2024-12-30T20:12:12.970Z Last Updated: 2024-12-30T23:06:10.269Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: iXsystems Products: TrueNAS CORE Problem Types: CWE-22 Description: iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of iXsystems TrueNAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tarfile.extractall method. The issue results from the lack of proper validation of a user-supplied path p
sts within the tarfile.extractall method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-25626. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1643/ - https://www.truenas.com/docs/core/13.0/gettingstarted/corereleasenotes/#130-u63
CVE ID: CVE-2024-11945 State: PUBLISHED Published: 2024-12-10T09:24:26.211Z Last Updated: 2024-12-10T15:08:57.965Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpdevelop Products: Email Reminders Problem Types: CWE-79 Description: The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes
ect arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a0adfd13-a9f1-4bec-96ec-6a51cd08e4ea?source=cve - https://plugins.trac.wordpress.org/browser/email-reminders/trunk/includes/page-rules/rules_shortcodes.php#L70 - https://wordpress.org/plugins/email-reminders/#developers - https://plugins.trac.wordpress.org/changeset/3202124/
CVE ID: CVE-2024-11946 State: PUBLISHED Published: 2024-12-30T20:12:23.839Z Last Updated: 2024-12-30T22:59:36.554Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: iXsystems Products: TrueNAS CORE Problem Types: CWE-319 Description: iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability. This vulnerability allows network-adjacent attackers to tamper with firmware update files on affected installations of iXsystems TrueNAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of firmware updates. The issue results from the use of an insecure p
ility. The specific flaw exists within the handling of firmware updates. The issue results from the use of an insecure protocol to deliver updates. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-25668. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1644/ - https://www.truenas.com/docs/core/13.0/gettingstarted/corereleasenotes/#130-u63
CVE ID: CVE-2024-11947 State: PUBLISHED Published: 2024-12-11T21:54:56.061Z Last Updated: 2024-12-12T15:47:27.753Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: GFI Products: Archiver Problem Types: CWE-502 Description: GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is required to exploit this vulnerability. The specific flaw exists within the Core Service, which listens on TCP port 8017 by default. The issue results from the lack of proper validation of user-supplied data, which can
tens on TCP port 8017 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-24029. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1670/
CVE ID: CVE-2024-11948 State: PUBLISHED Published: 2024-12-11T21:55:03.698Z Last Updated: 2024-12-12T15:47:00.578Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GFI Products: Archiver Problem Types: CWE-1395 Description: GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Telerik Web UI. An attacker can leverage this vulnerability to execute code in the contex
use of a vulnerable version of Telerik Web UI. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-24041. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1671/
CVE ID: CVE-2024-11949 State: PUBLISHED Published: 2024-12-11T21:55:10.645Z Last Updated: 2024-12-12T15:47:53.405Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: GFI Products: Archiver Problem Types: CWE-502 Description: GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is required to exploit this vulnerability. The specific flaw exists within the Store Service, which listens on TCP port 8018 by default. The issue results from the lack of proper validation of user-supplied data, which ca
istens on TCP port 8018 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-24331. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1672/
CVE ID: CVE-2024-11950 State: PUBLISHED Published: 2024-12-11T21:54:29.280Z Last Updated: 2024-12-12T15:47:33.176Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: XnSoft Products: XnView Classic Problem Types: CWE-191 Description: XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RWZ files. The issue results from the lack
age or open a malicious file. The specific flaw exists within the parsing of RWZ files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22913. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1640/
CVE ID: CVE-2024-11951 State: PUBLISHED Published: 2025-03-05T11:22:10.156Z Last Updated: 2025-03-05T14:14:48.674Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Fave Themes Products: Homey Login Register Problem Types: CWE-269 Description: The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
eges by creating an account with the administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/67c4066f-b8bc-4cd0-ae47-844af23e003f?source=cve - https://themeforest.net/item/homey-booking-wordpress-theme/23338013
CVE ID: CVE-2024-11952 State: PUBLISHED Published: 2024-12-04T08:22:46.454Z Last Updated: 2024-12-04T14:53:16.903Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: webcodingplace Products: Classic Addons – WPBakery Page Builder Problem Types: CWE-22 Description: The Classic Addons – WPBakery Page Builder plugin for WordPress is vulnerable to Limited Local PHP File Inclusion in all versions up to, and including, 3.0 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, and permissions granted by an Administrator, to include and execute arbitrary files on the server, allowing the execution of any P
sions granted by an Administrator, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. The vulnerability is limited to PHP files in a Windows environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9645b17e-6a7c-4cdd-ae43-7d2c84b624cc?source=cve - https://plugins.trac.wordpress.org/browser/classic-addons-wpbakery-page-builder-addons/tags/3.1/addons/testimonial-slider-item/testimonial-sli
ordpress.org/browser/classic-addons-wpbakery-page-builder-addons/tags/3.1/addons/testimonial-slider-item/testimonial-slider-item.php#L28
CVE ID: CVE-2024-11953 State: REJECTED Published: N/A Last Updated: 2025-05-07T21:56:46.605Z Description: No description available.
CVE ID: CVE-2024-11954 State: PUBLISHED Published: 2025-01-28T13:14:42.976Z Last Updated: 2025-01-28T14:17:00.797Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: Pimcore Problem Types: CWE-80, CWE-74 Description: A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown functionality of the component Search Document. The manipulation leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293905 - https://vuldb.com/?ctiid.293905 - https://vuld
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293905 - https://vuldb.com/?ctiid.293905 - https://vuldb.com/?submit.451774 - https://github.com/pimcore/pimcore/security/advisories/GHSA-xr3m-6gq6-22cg
CVE ID: CVE-2024-11955 State: PUBLISHED Published: 2025-02-25T15:07:56.854Z Last Updated: 2025-02-25T16:19:33.562Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: GLPI Problem Types: CWE-601 Description: A vulnerability was found in GLPI up to 10.0.17. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument redirect leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 10.0.18 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes
ion 10.0.18 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296809 - https://vuldb.com/?ctiid.296809 - https://vuldb.com/?submit.451775 - https://github.com/glpi-project/glpi/security/advisories/GHSA-g5fm-jq4j-c2c7 - https://github.com/glpi-project/glpi/releases/tag/10.0.18
CVE ID: CVE-2024-11956 State: PUBLISHED Published: 2025-01-28T13:46:27.639Z Last Updated: 2025-01-28T14:14:01.837Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Pimcore Products: customer-data-framework Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Pimcore customer-data-framework up to 4.2.0. Affected by this issue is some unknown functionality of the file /admin/customermanagementframework/customers/list. The manipulation of the argument filterDefinition/filter leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.2.1 is
ck may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.2.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293906 - https://vuldb.com/?ctiid.293906 - https://vuldb.com/?submit.451863 - https://github.com/pimcore/pimcore/security/advisories/GHSA-q53r-9hh9-w277 - https://github.com/pimcore/customer-data-framework/releases/tag/v4.2.1
CVE ID: CVE-2024-11957 State: PUBLISHED Published: 2025-03-04T15:41:00.514Z Last Updated: 2025-03-05T08:05:18.805Z Vendors: Kingsoft Products: WPS Office Problem Types: CWE-347 Description: Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.2.0.16909 to mitigate CVE-2024-7262 was not restrictive enough. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.welivesecurity.com/en/eset-research/analysis-of-two-arbitrary-code-execution-vulnerabilities-affecting-wps-office/
CVE ID: CVE-2024-11958 State: PUBLISHED Published: 2025-03-20T10:10:46.492Z Last Updated: 2025-03-20T18:16:55.822Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-89 Description: A SQL injection vulnerability exists in the `duckdb_retriever` component of the run-llama/llama_index repository, specifically in the latest version. The vulnerability arises from the construction of SQL queries without using prepared statements, allowing an attacker to inject arbitrary SQL code. This can lead to remote code execution (RCE) by installing the shellfs extension and executing malicious commands. Additional
an lead to remote code execution (RCE) by installing the shellfs extension and executing malicious commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/8ddf66e1-f74c-4d53-992b-76bc45cacac1 - https://github.com/run-llama/llama_index/commit/35bd221e948e40458052d30c6ef2779bc965b6d0
CVE ID: CVE-2024-11959 State: PUBLISHED Published: 2024-11-28T14:31:05.705Z Last Updated: 2024-11-29T17:13:32.019Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-605L Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formResetStatistic of the file /goform/formResetStatistic. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286341 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286341 - https://vuldb.com/?ctiid.286341 - https://vuldb.com/?submit.447484 - https://github.com/offshore0315/loT-vulnerable/blob/main/D-Link/formResetStatistic.md - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10393 - https://www.dlink.com/
CVE ID: CVE-2024-11960 State: PUBLISHED Published: 2024-11-28T14:31:09.257Z Last Updated: 2024-11-29T15:22:04.932Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-605L Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286342 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286342 - https://vuldb.com/?ctiid.286342 - https://vuldb.com/?submit.447485 - https://github.com/offshore0315/loT-vulnerable/blob/main/D-Link/formSetPortTr.md - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10393 - https://www.dlink.com/
CVE ID: CVE-2024-11961 State: PUBLISHED Published: 2024-11-28T15:00:08.998Z Last Updated: 2024-11-29T15:18:50.394Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Guangzhou Huayi Intelligent Technology Products: Jeewms Problem Types: CWE-200, CWE-284 Description: A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7. It has been rated as problematic. This issue affects the function preHandle of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. The manipulation of the argument request leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be
o information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286343 - https://vuldb.com/?ctiid.286343 - https://vuldb.com/?submit.445596 - https://github.com/dycccccccc/JEEWMS/blob/main/JEEWMS%20Shipper%20Information%20Leakage.docx
CVE ID: CVE-2024-11962 State: PUBLISHED Published: 2024-11-28T15:31:04.849Z Last Updated: 2024-11-29T15:15:49.056Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Simple Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2863
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286345 - https://vuldb.com/?ctiid.286345 - https://vuldb.com/?submit.452084 - https://github.com/w0r1dtr33/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2024-11963 State: PUBLISHED Published: 2024-11-28T15:31:06.512Z Last Updated: 2024-11-29T15:12:56.086Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Responsive Hotel Site Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected by this issue is some unknown functionality of the file /admin/room.php. The manipulation of the argument troom leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286346 - https://vuldb.com/?ctiid.286346 - https://vuldb.com/?submit.452106 - https://github.com/w0r1dtr33/cve/issues/2 - https://code-projects.org/