Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
TX/TX-B, FL MGUARD RS2000 TX/TX VPN, FL MGUARD RS2005 TX VPN, FL MGUARD RS4000 TX/TX-M, FL MGUARD RS4000 TX/TX-P, FL MGUARD RS4000 TX/TX VPN, FL MGUARD RS4004 TX/DTX, FL MGUARD RS4004 TX/DTX VPN, FL MGUARD SMART2, FL MGUARD SMART2 VPN Problem Types: CWE-1287 Description: Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-010/
CVE ID: CVE-2023-2674 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:59:52.352Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: openemr Products: openemr/openemr Problem Types: CWE-284 Description: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/af73e913-730c-4245-88ce-26fc908d3644 - https://github.com/openemr/openemr/commit/bb4244c83a74628faafabc0598366f49863914a9
CVE ID: CVE-2023-2675 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T16:00:15.740Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: linagora Products: linagora/twake Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/474d3b39-1882-4d2c-b8f7-ff9f68f14cee - https://github.com/linagora/twake/commit/0770da3b184b5d5e71fee8251a5847a04c7cb9bc
CVE ID: CVE-2023-2676 State: PUBLISHED Published: 2023-05-12T09:00:06.842Z Last Updated: 2025-01-24T16:14:21.075Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: H3C Products: R160 Problem Types: CWE-121 Description: A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may be used. VDB-228890 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
ifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.228890 - https://vuldb.com/?ctiid.228890 - https://github.com/xinzhihen06/dxq-cve/blob/main/h3cr160.md
CVE ID: CVE-2023-2677 State: PUBLISHED Published: 2023-05-12T09:31:03.678Z Last Updated: 2024-08-02T06:33:05.767Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Covid-19 Contact Tracing System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Covid-19 Contact Tracing System 1.0. This affects an unknown part of the file admin/establishment/manage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228891. Additional
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228891. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228891 - https://vuldb.com/?ctiid.228891 - https://github.com/BacteriaJun/cve/blob/main/SQL.md
CVE ID: CVE-2023-2678 State: PUBLISHED Published: 2023-05-12T09:31:04.719Z Last Updated: 2024-08-02T06:33:04.273Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: File Tracker Manager System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /file_manager/admin/save_user.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vul
tack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228892. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228892 - https://vuldb.com/?ctiid.228892 - https://github.com/csbsong/bug_report/blob/main/XSS.md
CVE ID: CVE-2023-2679 State: PUBLISHED Published: 2023-05-17T12:55:58.193Z Last Updated: 2025-03-05T18:59:17.458Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Snow Software Products: SPE SLM Problem Types: CWE-269 Description: Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.snowsoftware.com/s/feed/0D56M00009Ex9dySAB
CVE ID: CVE-2023-2680 State: PUBLISHED Published: 2023-09-13T16:50:53.532Z Last Updated: 2025-02-13T16:44:57.370Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a, Red Hat, Fedora Products: qemu, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization, Red Hat Enterprise Linux 9, Red Hat OpenStack Platform 13 (Queens), Fedora, Extra Packages for Enterprise Linux Problem Types: CWE-416 Description: This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a versio
ore specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-2680 - https://bugzilla.redhat.com/show_bug.cgi?id=2203387 - https://security.netapp.com/advisory/ntap-20231116-0001/
CVE ID: CVE-2023-2681 State: PUBLISHED Published: 2023-10-03T12:19:55.164Z Last Updated: 2024-09-19T19:53:17.252Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Jorani Products: Jorani Problem Types: CWE-89 Description: An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the “id” parameter, managing to extract arbritary information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/jo
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/jorani-sql-injection
CVE ID: CVE-2023-2682 State: PUBLISHED Published: 2023-05-12T12:31:06.112Z Last Updated: 2025-01-24T15:12:49.069Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Caton Products: Live Problem Types: CWE-77 Description: A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component Mini_HTTPD. The manipulation of the argument address with the input ;id;uname${IFS}-a leads to command injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-228911. NOTE: The vendor was contacted early about this disclosure but did not respond
ier of this vulnerability is VDB-228911. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.228911 - https://vuldb.com/?ctiid.228911
CVE ID: CVE-2023-2683 State: PUBLISHED Published: 2023-06-15T19:05:21.365Z Last Updated: 2024-12-11T21:13:24.613Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: silabs.com Products: Bluetooth SDK Problem Types: CWE-401 Description: A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs - https://https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/dow
es: - https://github.com/SiliconLabs - https://https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000U2U1QQAV?operationContext=S1
CVE ID: CVE-2023-2684 State: PUBLISHED Published: 2023-06-19T10:52:40.415Z Last Updated: 2024-12-11T16:34:50.382Z Vendors: Unknown Products: File Renaming on Upload Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The File Renaming on Upload WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/42b1f017-c497-4825-b12a-8dce3e108a55
CVE ID: CVE-2023-2685 State: PUBLISHED Published: 2023-07-28T11:31:50.625Z Last Updated: 2024-10-21T17:51:17.079Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: ABB Products: AO-OPC Problem Types: CWE-428 Description: A vulnerability was found in AO-OPC server versions mentioned above. As the directory information for the service entry is not enclosed in quotation marks, potential attackers could possibly call up another application than the AO-OPC server by starting the service. The service might be started with system user privileges which could cause a shift in user access privileges. It is unlikely to exploit the vulnerability in well maintained Windows i
could cause a shift in user access privileges. It is unlikely to exploit the vulnerability in well maintained Windows installations since the attacker would need write access to system folders. An update is available that resolves the vulnerability found during an internal review in the product AO-OPC = 3.2.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108468A4093&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2023-2686 State: PUBLISHED Published: 2023-06-15T19:00:04.688Z Last Updated: 2024-12-12T16:17:47.416Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: silabs.com Products: Gecko Platform Problem Types: CWE-120 Description: Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/gecko_sdk/releases - https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U2sFvQAJ?operationContext=S1
CVE ID: CVE-2023-2687 State: PUBLISHED Published: 2023-06-02T15:56:21.083Z Last Updated: 2025-01-08T17:56:25.502Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: silabs.com Products: Gecko SDK Problem Types: CWE-787 Description: Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures on the heap. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/gecko_sdk/releases - https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U2sWXQAZ?operationContext=S1
CVE ID: CVE-2023-2688 State: PUBLISHED Published: 2023-06-09T05:33:26.513Z Last Updated: 2024-12-20T23:38:17.348Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: nickboss, Unknown Products: WordPress File Upload, WordPress File Upload Pro Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/uploads by defa
This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/uploads by default) outside of the web root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/abd6eeac-0a7e-4762-809f-593cd85f303d?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2915978%40wp-file-upload%2Ftrunk&old=2909107%40wp-file-upload%2Ftrunk&sfp_email=&sfph_mail=#file2
CVE ID: CVE-2023-2689 State: PUBLISHED Published: 2023-05-14T08:00:03.745Z Last Updated: 2024-08-02T06:33:04.027Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Billing Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Billing Management System 1.0. This vulnerability affects unknown code of the file editproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228970 is the identifier assigned to this vulnerability. Additional A
been disclosed to the public and may be used. VDB-228970 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228970 - https://vuldb.com/?ctiid.228970 - https://github.com/niyuchunqiu/cve/blob/main/SQL.md
CVE ID: CVE-2023-2690 State: PUBLISHED Published: 2023-05-14T08:00:04.716Z Last Updated: 2024-08-02T06:33:05.782Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Personnel Property Equipment System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Personnel Property Equipment System 1.0. This issue affects some unknown processing of the file admin/returned_reuse_form.php of the component GET Parameter Handler. The manipulation of the argument client_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associat
ection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228971. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.228971 - https://vuldb.com/?ctiid.228971 - https://github.com/LeozhangCA/CVEReport/blob/main/SQL.md
CVE ID: CVE-2023-2691 State: PUBLISHED Published: 2023-05-14T08:31:03.372Z Last Updated: 2024-08-02T06:33:05.298Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Personnel Property Equipment System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/add_item.php of the component POST Parameter Handler. The manipulation of the argument item_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this
ible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228972. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228972 - https://vuldb.com/?ctiid.228972 - https://github.com/LeozhangCA/CVEReport/blob/main/StoredXSS.md
CVE ID: CVE-2023-2692 State: PUBLISHED Published: 2023-05-14T09:00:03.763Z Last Updated: 2024-08-02T06:33:04.269Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: ICT Laboratory Management System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester ICT Laboratory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/room_info.php of the component GET Parameter Handler. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB
g. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228973 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228973 - https://vuldb.com/?ctiid.228973 - https://github.com/LeozhangCA/CVEReport/blob/main/XSS.md
CVE ID: CVE-2023-2693 State: PUBLISHED Published: 2023-05-14T09:00:04.808Z Last Updated: 2024-08-02T06:33:05.493Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Exam System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-228974 is the identifier assigned to this vulnerabil
. The exploit has been disclosed to the public and may be used. VDB-228974 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228974 - https://vuldb.com/?ctiid.228974 - https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/mahasiswa_data.png
CVE ID: CVE-2023-2694 State: PUBLISHED Published: 2023-05-14T10:00:04.635Z Last Updated: 2024-11-22T15:43:22.674Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Exam System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228975. A
ploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228975. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.228975 - https://vuldb.com/?ctiid.228975 - https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/dosen_data.png
CVE ID: CVE-2023-2695 State: PUBLISHED Published: 2023-05-14T10:31:03.231Z Last Updated: 2024-08-02T06:33:05.832Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Exam System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228976. Additional An
loit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228976. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228976 - https://vuldb.com/?ctiid.228976 - https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/kelas_data.png
CVE ID: CVE-2023-2696 State: PUBLISHED Published: 2023-05-14T11:00:04.623Z Last Updated: 2024-08-02T06:33:04.392Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Exam System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228977 was assigned to this vulnerability. Ad
ploit has been disclosed to the public and may be used. The identifier VDB-228977 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228977 - https://vuldb.com/?ctiid.228977 - https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/matkul_data.png
CVE ID: CVE-2023-2697 State: PUBLISHED Published: 2023-05-14T11:31:03.337Z Last Updated: 2024-08-02T06:33:05.495Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Exam System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-228978 is the identifier assigned to this vulnerability. Addition
has been disclosed to the public and may be used. VDB-228978 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228978 - https://vuldb.com/?ctiid.228978 - https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/jurusan_data.png
CVE ID: CVE-2023-2698 State: PUBLISHED Published: 2023-05-14T11:31:04.283Z Last Updated: 2024-08-02T06:33:05.482Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Lost and Found Information System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=items/manage_item of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier
attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228979. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228979 - https://vuldb.com/?ctiid.228979 - https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/edit_item.png