Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tact the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235197 - https://vuldb.com/?ctiid.235197 - http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-3847 State: PUBLISHED Published: 2023-07-23T07:31:03.861Z Last Updated: 2025-08-21T13:54:26.070Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooDating Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in mooSocial mooDating 1.2. This vulnerability affects unknown code of the file /users of the component URL Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-235198 is the identifier assigned to this vulnerability. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst Notes:
the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235198 - https://vuldb.com/?ctiid.235198 - http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-3848 State: PUBLISHED Published: 2023-07-23T08:00:04.071Z Last Updated: 2024-10-17T20:02:30.818Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooDating Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue affects some unknown processing of the file /users/view of the component URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-235199. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.
NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235199 - https://vuldb.com/?ctiid.235199 - http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-3849 State: PUBLISHED Published: 2023-07-23T09:00:03.826Z Last Updated: 2024-08-02T07:08:50.495Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooDating Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in mooSocial mooDating 1.2. Affected is an unknown function of the file /find-a-match of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-235200. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly. Additional Analy
o contact the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235200 - https://vuldb.com/?ctiid.235200 - http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-3850 State: PUBLISHED Published: 2023-07-23T10:00:05.905Z Last Updated: 2024-08-02T07:08:50.505Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Lost and Found Information System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_category of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-235201 was assigned to this vulnerability. Addi
o sql injection. The attack can be launched remotely. The identifier VDB-235201 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235201 - https://vuldb.com/?ctiid.235201
CVE ID: CVE-2023-3852 State: PUBLISHED Published: 2023-07-23T22:00:04.288Z Last Updated: 2024-08-02T07:08:50.411Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-434 Description: A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/upload.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The i
me of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-235204. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235204 - https://vuldb.com/?ctiid.235204 - https://github.com/OpenRapid/rapidcms/issues/1 - https://github.com/OpenRapid/rapidcms/commit/4dff387283060961c362d50105ff8da8ea40bcbe
CVE ID: CVE-2023-3853 State: PUBLISHED Published: 2023-07-23T22:31:04.001Z Last Updated: 2024-11-21T15:51:04.171Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: phpscriptpoint Products: BloodBank Problem Types: CWE-79 Description: A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA AD
early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235205 - https://vuldb.com/?ctiid.235205
CVE ID: CVE-2023-3854 State: PUBLISHED Published: 2023-07-23T23:00:04.608Z Last Updated: 2024-08-02T07:08:50.528Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: phpscriptpoint Products: BloodBank Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POST Parameter Handler. The manipulation of the argument country/city/blood_group_id leads to sql injection. It is possible to launch the attack remotely. VDB-235206 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in a
fier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235206 - https://vuldb.com/?ctiid.235206
CVE ID: CVE-2023-3855 State: PUBLISHED Published: 2023-07-23T23:31:03.912Z Last Updated: 2024-08-02T07:08:50.512Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: phpscriptpoint Products: JobSeeker Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in phpscriptpoint JobSeeker 1.5. Affected by this vulnerability is an unknown functionality of the file /search-result.php. The manipulation of the argument kw/lc/ct/cp/p leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-235207. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional A
y is VDB-235207. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235207 - https://vuldb.com/?ctiid.235207
CVE ID: CVE-2023-3856 State: PUBLISHED Published: 2023-07-24T00:31:03.825Z Last Updated: 2024-10-15T20:13:14.752Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: phpscriptpoint Products: Ecommerce Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in phpscriptpoint Ecommerce 1.15. Affected by this issue is some unknown functionality of the file /blog-single.php. The manipulation of the argument slug leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235208. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Not
35208. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235208 - https://vuldb.com/?ctiid.235208
CVE ID: CVE-2023-3857 State: PUBLISHED Published: 2023-07-24T01:00:04.841Z Last Updated: 2024-08-02T07:08:50.500Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: phpscriptpoint Products: Ecommerce Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in phpscriptpoint Ecommerce 1.15. This affects an unknown part of the file /product.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235209 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Prog
he vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235209 - https://vuldb.com/?ctiid.235209
CVE ID: CVE-2023-3858 State: PUBLISHED Published: 2023-07-24T01:31:03.712Z Last Updated: 2025-08-21T13:53:02.684Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: phpscriptpoint Products: Car Listing Problem Types: CWE-79 Description: A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument country/state/city leads to cross site scripting. The attack can be initiated remotely. VDB-235210 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst No
bility. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235210 - https://vuldb.com/?ctiid.235210
CVE ID: CVE-2023-3859 State: PUBLISHED Published: 2023-07-24T02:00:04.712Z Last Updated: 2024-10-15T20:07:22.178Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: phpscriptpoint Products: Car Listing Problem Types: CWE-89 Description: A vulnerability was found in phpscriptpoint Car Listing 1.6 and classified as critical. This issue affects some unknown processing of the file /search.php of the component GET Parameter Handler. The manipulation of the argument brand_id/model_id/car_condition/car_category_id/body_type_id/fuel_type_id/transmission_type_id/year/mileage_start/mileage_end/country/state/city leads to sql injection. The attack may be initiated remotely. The associated ide
ge_start/mileage_end/country/state/city leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-235211. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235211 - https://vuldb.com/?ctiid.235211
CVE ID: CVE-2023-3860 State: PUBLISHED Published: 2023-07-24T02:31:03.193Z Last Updated: 2024-08-02T07:08:50.536Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: phpscriptpoint Products: Insurance Problem Types: CWE-79 Description: A vulnerability was found in phpscriptpoint Insurance 1.2. It has been classified as problematic. Affected is an unknown function of the file /page.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-235212. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - ht
bout this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235212 - https://vuldb.com/?ctiid.235212
CVE ID: CVE-2023-3861 State: PUBLISHED Published: 2023-07-24T03:00:05.021Z Last Updated: 2024-10-15T20:02:27.677Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: phpscriptpoint Products: Insurance Problem Types: CWE-79 Description: A vulnerability was found in phpscriptpoint Insurance 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235213 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program
vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235213 - https://vuldb.com/?ctiid.235213
CVE ID: CVE-2023-3862 State: PUBLISHED Published: 2023-07-24T03:31:03.806Z Last Updated: 2024-08-02T07:08:50.577Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Travelmate Products: Travelable Trek Management Solution Problem Types: CWE-79 Description: A vulnerability was found in Travelmate Travelable Trek Management Solution 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Box Handler. The manipulation of the argument comment leads to cross site scripting. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. VDB-235214 is
launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. VDB-235214 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235214 - https://vuldb.com/?ctiid.235214
CVE ID: CVE-2023-3863 State: PUBLISHED Published: 2023-07-24T14:25:02.287Z Last Updated: 2025-02-13T17:02:27.134Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a, Red Hat, Fedora Products: Kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-416 Description: A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE
leak issue. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-3863 - https://bugzilla.redhat.com/show_bug.cgi?id=2225126 - https://github.com/torvalds/linux/commit/6709d4b7bc2e079241fdef15d1160581c5261c10 - https://www.debian.org/security/2023/dsa-5480 - https://www.debian.org/security/2023/dsa-5492 - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://security.netapp.com/advisory/ntap-20240202-0002/
CVE ID: CVE-2023-3864 State: PUBLISHED Published: 2023-08-11T11:24:05.823Z Last Updated: 2024-10-09T19:13:07.827Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Snow Software Products: SLM Problem Types: CWE-89 Description: Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC
CVE ID: CVE-2023-3865 State: PUBLISHED Published: 2025-08-16T13:27:56.403Z Last Updated: 2025-08-19T05:47:12.083Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write. References: - https://git.kernel.org/stable/c/3813eee5154d6a4c5875cb4444cb2b63bac8947f - https://git.kernel.org/stable/c/c86211159bc3178b891e0d60e586a32c7b6a231b - https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e
.org/stable/c/c86211159bc3178b891e0d60e586a32c7b6a231b - https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e4284957d1 - https://git.kernel.org/stable/c/5fe7f7b78290638806211046a99f031ff26164e1
CVE ID: CVE-2023-3866 State: PUBLISHED Published: 2025-08-16T13:27:57.332Z Last Updated: 2025-08-19T05:47:13.303Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error. References: - https://git.kernel.org/stable/c/eb947403518ea3d93f6d89264bb1f5416bb0c7d0 - https://git
dereferecing error. References: - https://git.kernel.org/stable/c/eb947403518ea3d93f6d89264bb1f5416bb0c7d0 - https://git.kernel.org/stable/c/854156d12caa9d36de1cf5f084591c7686cc8a9d - https://git.kernel.org/stable/c/d1066c1b3663401cd23c0d6e60cdae750ce00c0f - https://git.kernel.org/stable/c/5005bcb4219156f1bf7587b185080ec1da08518e
CVE ID: CVE-2023-3867 State: PUBLISHED Published: 2025-08-16T13:29:51.946Z Last Updated: 2025-08-19T05:47:14.506Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first payload in the smb2_sess_setup(). References: - https://git.kernel.org/stable/c/676392184785ace61e939831e7ca44a03d438c3b - https://git.kernel.org/stable/c/ef572ffa8eb44111eed2925fbb2adca78bdcbf61 - https://git.kernel.org/stable/c/2ba03cecb12ac7a
tps://git.kernel.org/stable/c/ef572ffa8eb44111eed2925fbb2adca78bdcbf61 - https://git.kernel.org/stable/c/2ba03cecb12ac7ac9e0170e251543c56832d9959 - https://git.kernel.org/stable/c/98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8
CVE ID: CVE-2023-3869 State: PUBLISHED Published: 2023-10-20T07:29:28.812Z Last Updated: 2025-02-05T19:04:56.250Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: advancedcoding Products: Comments – wpDiscuz Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a comment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
ase or decrease the rating of a comment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b30ac1b0-eae2-4194-bf8e-ae73b4236965?source=cve - https://plugins.trac.wordpress.org/browser/wpdiscuz/trunk/utils/class.WpdiscuzHelperAjax.php#L681
CVE ID: CVE-2023-3870 State: REJECTED Published: 2023-07-24T16:49:18.201Z Last Updated: 2023-07-24T16:57:24.698Z Description: No description available.
CVE ID: CVE-2023-3871 State: PUBLISHED Published: 2023-07-24T21:31:03.873Z Last Updated: 2024-08-02T07:08:50.656Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/edit_category.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235233 was assigned to this vulnerability. Additional Analyst Notes: - CVE Progr
lic and may be used. The identifier VDB-235233 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235233 - https://vuldb.com/?ctiid.235233 - https://github.com/nagenanhai/cve/blob/main/1.pdf
CVE ID: CVE-2023-3872 State: PUBLISHED Published: 2023-07-24T22:00:03.976Z Last Updated: 2024-08-02T07:08:50.350Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235234 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Progra
lic and may be used. VDB-235234 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235234 - https://vuldb.com/?ctiid.235234 - https://github.com/nagenanhai/cve/blob/main/2.pdf
CVE ID: CVE-2023-3873 State: PUBLISHED Published: 2023-07-25T00:00:05.904Z Last Updated: 2024-11-21T15:50:37.811Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235235. Additional Analyst Not
sed to the public and may be used. The associated identifier of this vulnerability is VDB-235235. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235235 - https://vuldb.com/?ctiid.235235 - https://github.com/nagenanhai/cve/blob/main/3.pdf