Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9293 State: PUBLISHED Published: 2024-09-27T21:00:15.357Z Last Updated: 2024-09-30T16:28:34.973Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: skyselang Products: yylAdmin Problem Types: CWE-89 Description: A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument is_disable leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278785 - https://vuldb.com/?ctiid.278785 - https://vuldb.com/?submit.411499 - https://gitee.com/A0kooo/cve_article/blob/master/yyladmin/yyladmin%20file%20list%20have%20SQL%20injection.md
CVE ID: CVE-2024-9294 State: PUBLISHED Published: 2024-09-27T21:31:04.050Z Last Updated: 2024-09-30T16:10:41.862Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: dingfanzu Products: CMS Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. Affected by this issue is some unknown functionality of the file saveNewPwd.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version
to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278786 - https://vuldb.com/?ctiid.278786 - https://vuldb.com/?submit.412364 - https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/dingfanzu-CMS/dingfanzu-CMS%20saveNewPwd.php%20username%20SQL-inject.md
CVE ID: CVE-2024-9295 State: PUBLISHED Published: 2024-09-28T07:00:05.447Z Last Updated: 2024-09-30T15:56:39.272Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Advocate Office Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /control/login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278789 - https://vuldb.com/?ctiid.278789 - https://vuldb.com/?submit.412450 - https://github.com/para-paradise/webray.com.cn/blob/main/Advocate%20office%20management%20system/Advocate%20office%20management%20system%20login.php%20time-based%20SQL%20Injection%20Vulnerability.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9296 State: PUBLISHED Published: 2024-09-28T09:00:07.278Z Last Updated: 2024-09-30T15:48:01.715Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Advocate Office Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /control/forgot_pass.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278790 - https://vuldb.com/?ctiid.278790 - https://vuldb.com/?submit.412461 - https://github.com/para-paradise/webray.com.cn/blob/main/Advocate%20office%20management%20system/Advocate%20office%20management%20system%20forgot_pass.php%20time-based%20SQL%20Injection%20Vulnerability.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9297 State: PUBLISHED Published: 2024-09-28T12:00:06.109Z Last Updated: 2024-09-30T15:53:03.974Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Railway Reservation System Problem Types: CWE-285 Description: A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/system_info leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst
. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278791 - https://vuldb.com/?ctiid.278791 - https://vuldb.com/?submit.412500 - https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Online-Railway-Reservation-PrivEsc.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9298 State: PUBLISHED Published: 2024-09-28T13:31:05.506Z Last Updated: 2024-09-30T16:14:44.143Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Online Railway Reservation System Problem Types: CWE-284 Description: A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /?page=tickets of the component Ticket Handler. The manipulation of the argument id leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additiona
s controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278792 - https://vuldb.com/?ctiid.278792 - https://vuldb.com/?submit.412740 - https://github.com/gurudattch/CVEs/blob/main/Sourcecoderster-Online-Railway-Reservation-System-IDOR.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9299 State: PUBLISHED Published: 2024-09-28T14:00:06.755Z Last Updated: 2024-09-30T16:19:49.741Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Railway Reservation System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Online Railway Reservation System 1.0. This affects an unknown part of the file /?page=reserve. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278793 - https://vuldb.com/?ctiid.278793 - https://vuldb.com/?submit.412842 - https://github.com/gurudattch/CVEs/blob/main/Sourcecodster-Online-Railway-Reservation-StoredXSS-in-reservetion.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9300 State: PUBLISHED Published: 2024-09-28T14:31:04.870Z Last Updated: 2024-09-30T16:34:44.015Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Railway Reservation System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Online Railway Reservation System 1.0. This vulnerability affects unknown code of the file contact_us.php of the component Message Us Form. The manipulation of the argument fullname/email/message leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278794 - https://vuldb.com/?ctiid.278794 - https://vuldb.com/?submit.412476 - https://github.com/gurudattch/CVEs/blob/main/Sourcecoderster-Online-Railway-Reservation-System-stored-xss.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-9301 State: PUBLISHED Published: 2024-09-27T17:41:49.445Z Last Updated: 2024-09-27T18:59:31.078Z Vendors: Netflix Products: E2Nest Problem Types: CWE-22 Description: A path traversal issue in E2Nest prior to commit 8a41948e553c89c56b14410c6ed395e9cfb9250a Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2024-004.md
CVE ID: CVE-2024-9302 State: PUBLISHED Published: 2024-10-25T06:51:23.501Z Last Updated: 2024-10-25T14:13:47.782Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: appcheap Products: App Builder – Create Native Android & iOS Apps On The Flight Problem Types: CWE-640 Description: The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.3.7. This is due to the verify_otp_forgot_password() and update_password() functions not having enough controls to prevent a successful brute force attack of the OTP to change a password, or verify that a
not having enough controls to prevent a successful brute force attack of the OTP to change a password, or verify that a password reset request came from an authorized user. This makes it possible for unauthenticated attackers to generate and brute force an OTP that makes it possible to change any users passwords, including an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0eb9d676-4fa0-4bdc-af44-5d7e1dd8c6e6?source=cve - https://plugins.trac.wordpress.org/browser/app-builder/tags/5.3.1/includes/Di/Service/Auth/ForgotPassword.php#L247 - https://plugins.trac.wordpress.org/browser/app-builder/tags/5.3.1/i
1/includes/Di/Service/Auth/ForgotPassword.php#L247 - https://plugins.trac.wordpress.org/browser/app-builder/tags/5.3.1/includes/Di/Service/Auth/ForgotPassword.php#L196 - https://plugins.trac.wordpress.org/changeset/3161215/
CVE ID: CVE-2024-9304 State: PUBLISHED Published: 2024-10-01T07:30:14.324Z Last Updated: 2024-10-01T15:42:41.812Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dgamoni Products: LocateAndFilter Problem Types: CWE-79 Description: The LocateAndFilter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP
rary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a10ee67a-7f5f-43dd-8f5c-c0e92706c453?source=cve - https://wordpress.org/plugins/locateandfilter/#developers
CVE ID: CVE-2024-9305 State: PUBLISHED Published: 2024-10-16T02:05:04.962Z Last Updated: 2024-10-16T13:35:08.179Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: scottopolis Products: AppPresser – Mobile App Framework Problem Types: CWE-640 Description: The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.4. This is due to the appp_reset_password() and validate_reset_password() functions not having enough controls to prevent a successful brute force attack of the OTP to change a password, or verify that a password reset request came from an authorized use
brute force attack of the OTP to change a password, or verify that a password reset request came from an authorized user. This makes it possible for unauthenticated attackers to generate and brute force an OTP that makes it possible to change any users passwords, including an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/45647fa6-a98d-4eb4-a287-f523e434688b?source=cve - https://plugins.trac.wordpress.org/browser/apppresser/tags/4.4.4/inc/AppPresser_Ajax_Extras.php#L31 - https://plugins.trac.wordpress.org/browser/apppresser/tags/4.4.4/inc/AppPresser_WPAPI_Mods.php#L92 - https://plugins.trac.wordpress.
ins.trac.wordpress.org/browser/apppresser/tags/4.4.4/inc/AppPresser_WPAPI_Mods.php#L92 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3168744%40apppresser&new=3168744%40apppresser&sfp_email=&sfph_mail=
CVE ID: CVE-2024-9306 State: PUBLISHED Published: 2024-10-04T06:48:40.012Z Last Updated: 2024-10-04T13:42:52.703Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: wpdevelop Products: WP Booking Calendar Problem Types: CWE-79 Description: The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 10.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affec
e, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. In addition, site administrators have the option to grant lower-level users with access to manage the plugin's settings which may extend this vulnerability to those users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/128d45ec-941c-414c-b341-9964dc748132?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3161259%40booking&new=3158531%40booking&sfp_email=&sfph_mail=
CVE ID: CVE-2024-9307 State: PUBLISHED Published: 2024-11-06T06:43:28.628Z Last Updated: 2024-11-06T15:07:43.080Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: themelooks Products: mFolio Lite Problem Types: CWE-434 Description: The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file or upload arbitrary EXE files on the affected site's server which may make remote code execution possi
sses the SVG file or upload arbitrary EXE files on the affected site's server which may make remote code execution possible if the attacker can also gain access to run the .exe file, or trick a site visitor into downloading and running the .exe file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3b4012dd-7c0a-45f1-8ada-8f9dc6867e1e?source=cve - https://wordpress.org/plugins/mfolio-lite/#developers
CVE ID: CVE-2024-9308 State: PUBLISHED Published: 2025-03-20T10:10:36.502Z Last Updated: 2025-03-20T18:19:20.435Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: haotian-liu Products: haotian-liu/llava Problem Types: CWE-601 Description: An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/6233a165-a435-464d-915c-4c7510ffbf82
CVE ID: CVE-2024-9309 State: PUBLISHED Published: 2025-03-20T10:09:43.094Z Last Updated: 2025-03-20T18:35:40.977Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: haotian-liu Products: haotian-liu/llava Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in haotian-liu/llava version v1.2.0 (LLaVA-1.6). This vulnerability allows attackers to exploit the victim Controller API Server's credentials to perform unauthorized web actions or access unauthorized web resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
actions or access unauthorized web resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/2ba6be79-5c90-48fa-99cb-82503ea49a12
CVE ID: CVE-2024-9310 State: PUBLISHED Published: 2025-01-22T18:41:09.294Z Last Updated: 2025-02-12T20:41:24.185Z Vendors: Traffic Alert and Collision Avoidance System (TCAS) II Products: Collision Avoidance Systems Problem Types: CWE-807 Description: By utilizing software-defined radios and a custom low-latency processing pipeline, RF signals with spoofed location data can be transmitted to aircraft targets. This can lead to the appearance of fake aircraft on displays and potentially trigger undesired Resolution Advisories (RAs). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-01
CVE ID: CVE-2024-9311 State: PUBLISHED Published: 2025-03-20T10:10:24.186Z Last Updated: 2025-10-15T12:50:46.202Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: haotian-liu Products: haotian-liu/llava Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability in haotian-liu/llava v1.2.0 (LLaVA-1.6) allows an attacker to upload files with malicious content without authentication or user interaction. The uploaded file is stored in a predictable path, enabling the attacker to execute arbitrary JavaScript code in the context of the victim's browser by visiting the crafted file URL. This can lead to theft of sensitive information, sess
context of the victim's browser by visiting the crafted file URL. This can lead to theft of sensitive information, session hijacking, or other actions compromising the security and privacy of the victim. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/15b18b85-5a6b-43e7-bc65-6b4772871e98
CVE ID: CVE-2024-9312 State: PUBLISHED Published: 2024-10-10T13:42:31.950Z Last Updated: 2024-10-10T14:55:40.228Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Ltd. Products: Authd Problem Types: CWE-286 Description: Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ubuntu/authd/security/advisories/GHSA-4gfw-wf7c-w6g2 - https://www.cve.org/CVERecord?id=CVE-2024-9312
CVE ID: CVE-2024-9313 State: PUBLISHED Published: 2024-10-03T11:04:00.474Z Last Updated: 2024-11-22T19:03:50.205Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Canonical Ltd. Products: Authd Description: Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787 - https://www.cve.org/CVERecord?id=CVE-2024-9313
CVE ID: CVE-2024-9314 State: PUBLISHED Published: 2024-10-05T11:21:20.603Z Last Updated: 2024-10-16T15:01:36.402Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: rankmath Products: Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Problem Types: CWE-502 Description: The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via deserialization of untrusted input 'set_redirections' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable
kers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/af5ed47e-f183-4e72-a916-15020e2bc91e?source=cve - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/admin/class-import-export.php#L507 - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/admin/class-import-e
import-export.php#L507 - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/admin/class-import-export.php#L514 - https://plugins.trac.wordpress.org/changeset/3161896/
CVE ID: CVE-2024-9315 State: PUBLISHED Published: 2024-09-28T19:00:06.186Z Last Updated: 2024-09-30T19:08:00.121Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee and Visitor Gate Pass Logging System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/manage_department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278819 - https://vuldb.com/?ctiid.278819 - https://vuldb.com/?submit.412524 - https://github.com/zonesec0/findcve/issues/3 - https://www.sourcecodester.com/
CVE ID: CVE-2024-9316 State: PUBLISHED Published: 2024-09-28T20:00:05.694Z Last Updated: 2024-09-30T15:45:14.734Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blood/update/B+.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278820 - https://vuldb.com/?ctiid.278820 - https://vuldb.com/?submit.412584 - https://github.com/cookie5201314/CVE/blob/main/sql2.md - https://code-projects.org/