Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-25167 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-05T17:20:04.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument description parameter when submitting a comment on a post. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/biantaibao/eblog_xss/blob/main/report.md
CVE ID: CVE-2024-25168 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-01T23:36:21.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/biantaibao/snow_SQL/blob/main/report.md
CVE ID: CVE-2024-25169 State: PUBLISHED Published: 2024-02-28T00:00:00.000Z Last Updated: 2025-03-28T18:28:31.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ibb.co/Pt9qd8t - https://ibb.co/JKh4hmD - https://ibb.co/rfrKj3r - https://ibb.co/hLLPTVp - https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0
CVE ID: CVE-2024-25170 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-11-19T21:06:33.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ibb.co/DpxHpz9 - https://ibb.co/T0fhLwR - https://github.com/shenhav12/CVE-2024-25170-Mezzanine-v6.0.0
CVE ID: CVE-2024-25175 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-08-15T20:20:15.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Kickdler before v1.107.0 allows attackers to provide an XSS payload via a HTTP response splitting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kickidler.com/ - https://github.com/jet-pentest/CVE-2024-25175
CVE ID: CVE-2024-25176 State: PUBLISHED Published: 2025-07-07T00:00:00.000Z Last Updated: 2025-11-03T18:08:15.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/LuaJIT/LuaJIT/commit/343ce0edaf3906a62022936175b2f5410024cbfc - https://github.com/LuaJIT/LuaJIT/issues/1149 - https://gist.github.com/pwnhacker0x18/cd75d01fc7c9b6c85c183fbe5353d276 - https://github.com/openresty/luajit2/commit/343ce0edaf3906a62022936175b2f5410024cbfc
CVE ID: CVE-2024-25177 State: PUBLISHED Published: 2025-07-07T00:00:00.000Z Last Updated: 2025-11-03T18:08:16.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/LuaJIT/LuaJIT/commit/85b4fed0b0353dd78c8c875c2f562d522a2b310f - https://github.com/LuaJIT/LuaJIT/issues/1147 - https://gist.github.com/pwnhacker0x18/a73f560d79f2c3d4011d6c5a2676f04a - https://github.com/openresty/luajit2/commit/85b4fed0b0353dd78c8c875c2f562d522a2b
0x18/a73f560d79f2c3d4011d6c5a2676f04a - https://github.com/openresty/luajit2/commit/85b4fed0b0353dd78c8c875c2f562d522a2b310f
CVE ID: CVE-2024-25178 State: PUBLISHED Published: 2025-07-07T00:00:00.000Z Last Updated: 2025-11-03T18:08:17.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/LuaJIT/LuaJIT/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8 - https://github.com/LuaJIT/LuaJIT/issues/1152 - https://gist.github.com/pwnhacker0x18/423b4292f301ab274b42d5ed6e0b87d8 - https://github.com/openresty/luajit2/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8
CVE ID: CVE-2024-25180 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-26T19:31:26.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after installing a test framework (that lives outside of the pdfmake applicaton). Anyone installing this is responsible for ensuring that it is only available to authorized testers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gith
thorized testers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joaoviictorti/My-CVES/blob/main/CVE-2024-25180/README.md - https://www.youtube.com/watch?v=QcOlrWUGo6o - https://security.snyk.io/vuln/SNYK-JS-PDFMAKE-6347243 - https://github.com/bpampuch/pdfmake/issues/2702
CVE ID: CVE-2024-25187 State: PUBLISHED Published: 2024-04-02T00:00:00 Last Updated: 2024-08-28T19:18:25.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery (SSRF) vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiaocheng-keji/71cms/issues/2 - https://gist.github.com/wisejayer/d365e93ce09b8a36641165e1d1a0a06c
CVE ID: CVE-2024-25189 State: PUBLISHED Published: 2024-02-08T00:00:00 Last Updated: 2024-08-26T19:11:28.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/P3ngu1nW/CVE_Request/blob/main/benmcollins%3Alibjwt.md - https://lists.debian.org/debian-lts-announce/2024/02/msg00009.html
CVE ID: CVE-2024-25190 State: PUBLISHED Published: 2024-02-08T00:00:00 Last Updated: 2024-08-19T19:58:09.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/P3ngu1nW/CVE_Request/blob/main/GlitchedPolygons%3Al8w8jwt.md
CVE ID: CVE-2024-25191 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-12T15:00:33.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: php-jwt 1.0.0 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/P3ngu1nW/CVE_Request/blob/main/cdoco%3Aphp-jwt.md
CVE ID: CVE-2024-25196 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-08-15T13:48:00.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vulnerability is triggerd via sending a crafted .yaml file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ros-planning/navigation2/issues/4005 - https://robotics.stackexchange.com/questions/106008/ros2nav2user-misconfiguration-of-parameters-may-cause-instantaneous-crashs - https://github.com/ros-planning/navig
06008/ros2nav2user-misconfiguration-of-parameters-may-cause-instantaneous-crashs - https://github.com/ros-planning/navigation2/pull/4017
CVE ID: CVE-2024-25197 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-10-29T20:06:53.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ros-planning/navigation2/issues/3940 - https://github.com/ros-planning/navigation2/issues/3958 - https://github.com/ros-planning/navigation2/issues/3971 - https://github.com/ros-planning/navigation2/issues/3972
CVE ID: CVE-2024-25198 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-08-01T23:36:21.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ros-planning/navigation2/pull/4068 - https://github.com/ros-planning/navigation2/pull/4070 - https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344
CVE ID: CVE-2024-25199 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-08-29T13:39:39.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344 - https://github.com/ros-planning/navigation2/pull/4078 - https://github.com/ros-planning/navigation2/pull/4079
CVE ID: CVE-2024-25200 State: PUBLISHED Published: 2024-02-07T00:00:00.000Z Last Updated: 2025-06-20T20:15:40.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espruino 2v20 (commit fcc9ba4) was discovered to contain a Stack Overflow via the jspeFactorFunctionCall at src/jsparse.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/espruino/Espruino/issues/2457
CVE ID: CVE-2024-25201 State: PUBLISHED Published: 2024-02-07T00:00:00.000Z Last Updated: 2025-06-17T20:03:44.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/espruino/Espruino/issues/2456
CVE ID: CVE-2024-25202 State: PUBLISHED Published: 2024-02-28T00:00:00.000Z Last Updated: 2025-04-22T15:59:52.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attackers to run arbitrary code via the search bar. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Agampreet-Singh/CVE-2024-25202 - https://medium.com/%40agampreetsingh_93704/cve-2024-25202-discover-by-agampreet-singh-cyber-security-expert-ff8e32f5cf52 - https://drive.google.com/file/d/1oMNcChsXPMP9pu9lIE2C11n8mzkmLhcY/view
CVE ID: CVE-2024-25207 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:08:12.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Contact Number parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Baran
nrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20XSS-2.md
CVE ID: CVE-2024-25208 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-04-24T15:37:59.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%2
iner: References: - https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20XSS-1.md
CVE ID: CVE-2024-25209 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:08:48.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20SQL%20Injection.md
CVE ID: CVE-2024-25210 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:11:49.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Simple%20Expense%20Tracker/Simple%20Expense%20Tacker%20-%20SQL%20Injection-1.md
CVE ID: CVE-2024-25211 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:12:07.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_category.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Simple%20Expense%20Tracker/Simple%20Expense%20Tracker%20-%20SQL%20Injection-2.md
CVE ID: CVE-2024-25212 State: PUBLISHED Published: 2024-02-14T00:00:00 Last Updated: 2024-08-28T19:53:25.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Employee%20Management%20System/Employee%20Managment%20System%20-%20SQL%20Injection%20-%204.md
CVE ID: CVE-2024-25213 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:13:20.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Employee%20Management%20System/Employee%20Managment%20System%20-%20SQL%20Injection%20-%203.md
CVE ID: CVE-2024-25214 State: PUBLISHED Published: 2024-02-14T00:00:00 Last Updated: 2024-08-16T19:50:15.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Employee%20Management%20System/Employee%20Managment%20System%20-%20Authentication%20Bypass.md
CVE ID: CVE-2024-25215 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-08T15:32:24.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Employee%20Management%20System/Employee%20Managment%20System%20-%20SQL%20Injection%20-%202.md
CVE ID: CVE-2024-25216 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-03-13T18:37:31.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/BurakSevben/CVEs/blob/main/Employee%20Management%20System/Employee%20Managment%20System%20-%20SQL%20Injection%20-%201.md
CVE ID: CVE-2024-25217 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-03-27T19:08:48.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Online%20Medicine%20Ordering%20System/OMOS%20-%20SQL%20Injection%28Unauthenticated%29.md
CVE ID: CVE-2024-25218 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-03-13T17:08:42.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter /TaskManager/Projects.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20Cross-Site-Scripting%20-1.md
CVE ID: CVE-2024-25219 State: PUBLISHED Published: 2024-02-14T00:00:00 Last Updated: 2024-08-01T23:36:21.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Task Name parameter /TaskManager/Task.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20Cross-Site-Scripting%20-%202.md
CVE ID: CVE-2024-25220 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:13:48.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20SQL%20Injection%20-%202.md
CVE ID: CVE-2024-25221 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:14:09.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20Cross-Site-Scripting%20-3.md
CVE ID: CVE-2024-25222 State: PUBLISHED Published: 2024-02-14T00:00:00 Last Updated: 2024-08-16T18:33:32.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20SQL%20Injection%20-%201.md
CVE ID: CVE-2024-25223 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:15:19.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Simple%20Admin%20Panel%20App/Simple%20Admin%20Panel%20App%20-%20SQL%20Injection.md
CVE ID: CVE-2024-25224 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-12T15:15:44.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Size Number parameter under the Add Size function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Simple%20Admin%20Panel%20App/Simple%20Admin%20Panel%20App%20-%20Cross-Site-Scripting%20-%202.md
CVE ID: CVE-2024-25225 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-05-08T15:29:57.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BurakSevben/CVEs/blob/main/Simple%20Admin%20Panel%20App/Simple%20Admin%20Panel%20App%20-%20Cross-Site-Scripting%20-%201.md
CVE ID: CVE-2024-25226 State: PUBLISHED Published: 2024-02-14T00:00:00.000Z Last Updated: 2025-03-14T18:15:02.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/BurakSevben/CVEs/blob/main/Supplier%20Managment%20System/Supplier%20Managment%20System%20-%20SQL%20Injection.md