Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1535 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-25T21:14:42.121Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25 - https://huntr.dev/bounties/4d4b0caa-6d8c-4574-ae7e-e9ef5e2e1a40
CVE ID: CVE-2023-1536 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-27T16:47:35.124Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/538207f4-f805-419a-a314-51716643f05e - https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25
CVE ID: CVE-2023-1537 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-27T16:51:11.306Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-294 Description: Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af - https://huntr.dev/bounties/171cde18-a447-446c-a9ab-297953ad9b86
CVE ID: CVE-2023-1538 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-27T16:55:54.306Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-208 Description: Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af - https://huntr.dev/bounties/ac0271eb-660f-4966-8b57-4bc660a9a1a0
CVE ID: CVE-2023-1539 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-27T17:02:43.046Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/b4df67f4-14ea-4051-97d4-26690c979a28 - https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af
CVE ID: CVE-2023-1540 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-25T20:24:35.893Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-204 Description: Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d8d6c259-a0f2-4209-a3b0-ecbf3eb092f4 - https://github.com/answerdev/answer/commit/1de3ec27e50ba7389c9449c59e8ea3a37a908ee4
CVE ID: CVE-2023-1541 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-27T17:03:49.959Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-840 Description: Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/8fd891c6-b04e-4dac-818f-9ea30861cd92 - https://github.com/answerdev/answer/commit/15390adbfcd5fd37af4661f992f8873ae5a6b840
CVE ID: CVE-2023-1542 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T18:34:58.666Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-840 Description: Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d947417c-5a12-407a-9a2f-fa696f65126f - https://github.com/answerdev/answer/commit/4ca2429d190a6e614f5bbee1173c80a7cffcc568
CVE ID: CVE-2023-1543 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T18:33:45.462Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-613 Description: Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f82388d6-dfc3-4fbc-bea6-eb40cf5b2683 - https://github.com/answerdev/answer/commit/cd742b75605c99776f32d271c0a60e0f468e181c
CVE ID: CVE-2023-1544 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-11-03T19:27:58.423Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Problem Types: CWE-125 Description: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-1544 - https://bugzilla.redhat.com/show
Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-1544 - https://bugzilla.redhat.com/show_bug.cgi?id=2180364 - https://lists.nongnu.org/archive/html/qemu-devel/2023-03/msg00206.html - https://security.netapp.com/advisory/ntap-20230511-0005/
CVE ID: CVE-2023-1545 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T18:32:30.066Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: nilsteampassnet Products: nilsteampassnet/teampass Problem Types: CWE-89 Description: SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/942c015f-7486-49b1-94ae-b1538d812bc2 - https://github.com/nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66
CVE ID: CVE-2023-1546 State: PUBLISHED Published: 2023-05-02T07:05:00.258Z Last Updated: 2025-01-30T14:25:42.498Z Vendors: Unknown Products: MyCryptoCheckout Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/bb065397-370f-4ee1-a2c8-20e4dc4415a0
CVE ID: CVE-2023-1547 State: PUBLISHED Published: 2023-07-13T07:42:44.365Z Last Updated: 2024-10-30T16:07:39.790Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Elra Products: Parkmatik Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection.This issue affects Parkmatik: before 02.01-a51. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0404
CVE ID: CVE-2023-1548 State: PUBLISHED Published: 2023-04-18T16:42:18.451Z Last Updated: 2025-02-05T21:14:31.860Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Schneider Electric Products: EcoStruxure Control Expert Problem Types: CWE-269 Description: A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-03.pdf
CVE ID: CVE-2023-1549 State: PUBLISHED Published: 2023-05-15T12:15:30.894Z Last Updated: 2025-01-24T20:20:10.676Z Vendors: Unknown Products: Ad Inserter Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c94b3a68-673b-44d7-9251-f3590cc5ee9e
CVE ID: CVE-2023-1550 State: PUBLISHED Published: 2023-03-29T16:34:38.119Z Last Updated: 2025-02-13T16:39:29.086Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: NGINX Agent Problem Types: CWE-532 Description: Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is only exposed when the non-default trace level logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API C
l logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API Connectivity Manager, and NGINX Management Suite Security Monitoring. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000133135 - https://security.netapp.com/advisory/ntap-20230511-0008/
CVE ID: CVE-2023-1552 State: PUBLISHED Published: 2023-04-11T14:38:16.504Z Last Updated: 2025-02-06T21:44:02.467Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L) Vendors: GE Gas Power Products: ToolboxST Problem Types: CVE-502 Description: ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator could execute code in a Toolbox user's context through the deserialization of an untrusted configuration file. Two CVSS scores have been provided to capture the differences between the two aforementioned attack vectors. Customers are advise
scores have been provided to capture the differences between the two aforementioned attack vectors. Customers are advised to update to ToolboxST 7.10 which can be found in ControlST 7.10. If unable to update at this time customers should ensure they are following the guidance laid out in GE Gas Power's Secure Deployment Guide (GEH-6839). Customers should ensure they are not running ToolboxST as an Administrative user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ge.com/content/dam/cyber_security/global/en_US/pdfs/2023-03-23_ToolboxST_Deserialization_of_Untrusted_Configuration_Data.pdf
CVE ID: CVE-2023-1554 State: PUBLISHED Published: 2023-05-02T07:04:51.044Z Last Updated: 2025-01-30T14:58:36.577Z Vendors: Unknown Products: Quick Paypal Payments Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0d247a3d-154e-4da7-a147-c1c7e1b5e87e
CVE ID: CVE-2023-1555 State: PUBLISHED Published: 2023-09-01T10:01:36.711Z Last Updated: 2025-11-20T04:06:28.258Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-262 Description: An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A namespace-level banned user can access the API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/398587 - https://hackerone.com/reports/1911908
CVE ID: CVE-2023-1556 State: PUBLISHED Published: 2023-03-22T10:31:03.237Z Last Updated: 2024-08-02T05:49:11.673Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Judging Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file summary_results.php. The manipulation of the argument main_event_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223549 was assigned to this vulnerability. Additi
t has been disclosed to the public and may be used. The identifier VDB-223549 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223549 - https://vuldb.com/?ctiid.223549 - https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/judging-management-system/SQLi-1.md
CVE ID: CVE-2023-1557 State: PUBLISHED Published: 2023-03-22T10:31:04.403Z Last Updated: 2024-08-02T05:49:11.780Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: E-Commerce System Problem Types: CWE-284 Description: A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ecommerce/admin/user/controller.php?action=edit of the component Username Handler. The manipulation of the argument USERID leads to improper access controls. The attack may be launched remotely. VDB-223550 is the identifier assigned to this vulnerability. Additional Analyst Notes:
attack may be launched remotely. VDB-223550 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223550 - https://vuldb.com/?ctiid.223550
CVE ID: CVE-2023-1558 State: PUBLISHED Published: 2023-03-22T11:00:04.528Z Last Updated: 2024-08-02T05:49:11.691Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Simple and Beautiful Shopping Cart System Problem Types: CWE-434 Description: A vulnerability classified as critical has been found in Simple and Beautiful Shopping Cart System 1.0. This affects an unknown part of the file uploadera.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223551. Additional Analyst Notes: - CVE Program Container: Re
ed. The associated identifier of this vulnerability is VDB-223551. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223551 - https://vuldb.com/?ctiid.223551 - https://github.com/nightcloudos/bug_report/blob/main/simple%20and%20beautiful%20shopping%20cart%20system/simple%20and%20beautiful%20shopping%20cart%20system%20uploadera.php%20has%20a%20file%20upload%20vulnerability.pdf
CVE ID: CVE-2023-1559 State: PUBLISHED Published: 2023-03-22T11:31:04.033Z Last Updated: 2024-08-02T05:49:11.693Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Storage Unit Rental Management System Problem Types: CWE-434 Description: A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223552. Additional Analyst Notes: - CVE Prog
to the public and may be used. The identifier of this vulnerability is VDB-223552. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223552 - https://vuldb.com/?ctiid.223552 - https://github.com/ret2hh/bug_report/blob/main/UPLOAD.md
CVE ID: CVE-2023-1560 State: PUBLISHED Published: 2023-03-22T11:31:04.983Z Last Updated: 2024-11-22T17:51:20.095Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: n/a Products: TinyTIFF Problem Types: CWE-120 Description: A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader.c of the component File Handler. The manipulation leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223553 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: -
used. The identifier VDB-223553 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223553 - https://vuldb.com/?ctiid.223553 - https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF - https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF/blob/main/id8
CVE ID: CVE-2023-1561 State: PUBLISHED Published: 2023-03-22T12:00:04.562Z Last Updated: 2024-08-02T05:49:11.692Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Simple Online Hotel Reservation System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223554 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.22355
gned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223554 - https://vuldb.com/?ctiid.223554 - https://github.com/sincere9/Bug-Hub/blob/main/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf
CVE ID: CVE-2023-1562 State: PUBLISHED Published: 2023-03-22T10:16:19.862Z Last Updated: 2024-12-06T23:06:03.914Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost fails to check the "Show Full Name" setting when rendering the result for the /plugins/focalboard/api/v2/users API call, allowing an attacker to learn the full name of a board owner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2023-1563 State: PUBLISHED Published: 2023-03-22T12:31:03.435Z Last Updated: 2025-02-20T21:11:56.273Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Student Study Center Desk Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/assign/assign.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulner
aunched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223555. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223555 - https://vuldb.com/?ctiid.223555 - https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun3.pdf
CVE ID: CVE-2023-1564 State: PUBLISHED Published: 2023-03-22T12:31:04.553Z Last Updated: 2024-08-02T05:49:11.690Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Air Cargo Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabi
may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223556. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223556 - https://vuldb.com/?ctiid.223556 - https://github.com/333123www/bug_report/blob/main/SQLi-1.md
CVE ID: CVE-2023-1565 State: PUBLISHED Published: 2023-03-22T13:00:04.880Z Last Updated: 2024-08-02T05:49:11.691Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: FeiFeiCMS Problem Types: CWE-79 Description: A vulnerability was found in FeiFeiCMS 2.7.130201. It has been classified as problematic. This affects an unknown part of the file \Public\system\slide_add.html of the component Extension Tool. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223557 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Ref
ed. The identifier VDB-223557 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223557 - https://vuldb.com/?ctiid.223557 - https://github.com/1114506941/lsummer/blob/main/README.md
CVE ID: CVE-2023-1566 State: PUBLISHED Published: 2023-03-22T13:31:04.648Z Last Updated: 2024-08-02T05:49:11.674Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Medical Certificate Generator App Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-223558 is the identifier assigned to this vulnerability. Additional Analyst Notes: - C
o the public and may be used. VDB-223558 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223558 - https://vuldb.com/?ctiid.223558 - https://github.com/E1CHO/cve_hub/blob/main/Medical%20Certificate%20Generator%20App/Medical%20Certificate%20Generator%20App%20-%20vlun(2).pdf