Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31861 State: PUBLISHED Published: 2023-05-25T00:00:00 Last Updated: 2025-01-16T15:01:49.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZLMediaKit 4.0 is vulnerable to Directory Traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nbb651/CVE-ZLMediaKit/blob/main/README.md - https://gist.github.com/nbb651/5aa72867fc1df3ef52e690b293964aac
CVE ID: CVE-2023-31862 State: PUBLISHED Published: 2023-05-19T00:00:00 Last Updated: 2025-01-21T19:39:55.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published in the front end is only filtered in the front end, without being filtered in the background, which allows attackers to publish an article containing malicious JavaScript scripts by modifying the request package. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cherry-toto/jizhicms/issues/86
CVE ID: CVE-2023-31867 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T15:25:52.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sage.com - https://github.com/Digitemis/Advisory/blob/main/CVE-2023-31867.txt
CVE ID: CVE-2023-31868 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T15:25:00.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting (XSS). Some parts of the Web application are dynamically built using user's inputs. Yet, those inputs are not verified nor filtered by the application, so they mathed the expected format. Therefore, when HTML/JavaScript code is injected into those fields, this code will be saved by the application and executed by the web browser of the user viewing the web page. Several injection points have been identified on the application. The major one requires the user t
iewing the web page. Several injection points have been identified on the application. The major one requires the user to be authenticated with a common account, he can then target an Administrator. All others endpoints need the malicious user to be authenticated as an Administrator. Therefore, the impact is diminished. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sage.com - https://github.com/Digitemis/Advisory/blob/main/CVE-2023-31868.txt
CVE ID: CVE-2023-31871 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2025-01-22T14:51:08.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dm_secure_writer. The binary has security controls in place preventing creation of a file in a non-owned directory, or as the root user. However, these controls can be carefully bypassed to allow for an arbitrary file write as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
rary file write as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/picar0jsu/a8e623639da34f36202ce5e436668de7
CVE ID: CVE-2023-31873 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2025-01-14T18:13:19.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process'). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/172530/Gin-Markdown-Editor-0.7.4-Arbitrary-Code-Execution.html
CVE ID: CVE-2023-31874 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2025-01-14T18:12:15.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_process'). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/172535/Yank-Note-3.52.1-Arbitrary-Code-Execution.html
CVE ID: CVE-2023-31889 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T15:03:28.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/donnm/cves/-/blob/master/dos_rtac51u_httpd.md
CVE ID: CVE-2023-31890 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T14:55:34.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glazedlists/glazedlists/issues/709
CVE ID: CVE-2023-31893 State: PUBLISHED Published: 2023-06-05T00:00:00.000Z Last Updated: 2025-01-31T15:01:34.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of Service (DoS) via DNS Recursion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cert.br/docs/whitepapers/dns-recursivo-aberto/ - https://medium.com/%40shooterRX/dns-recursion-leads-to-dos-attack-vivo-play-iptv-cve-2023-31893-b5ac45f38f
CVE ID: CVE-2023-31902 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:03:40.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.redpacketsecurity.com/mobile-mouse-code-execution/ - https://www.exploit-db.com/exploits/51010
CVE ID: CVE-2023-31903 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-27T21:07:02.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51052 - https://github.com/blue0x1/GuppY-exploit-rce
CVE ID: CVE-2023-31904 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-21T19:57:20.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51015
CVE ID: CVE-2023-31906 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T17:16:33.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js/js-lexer.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5066
CVE ID: CVE-2023-31907 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T18:56:03.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner_literal_is_created at /jerry-core/parser/js/js-scanner-util.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5073
CVE ID: CVE-2023-31908 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T16:28:55.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedarray_prototype_sort. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5067
CVE ID: CVE-2023-31910 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T16:27:03.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_function_statement at /jerry-core/parser/js/js-parser-statm.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5076
CVE ID: CVE-2023-31913 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:27:46.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5061
CVE ID: CVE-2023-31914 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:26:50.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5071
CVE ID: CVE-2023-31916 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T16:11:14.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5062
CVE ID: CVE-2023-31918 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:25:26.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5064
CVE ID: CVE-2023-31919 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:24:26.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5069
CVE ID: CVE-2023-31920 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:31:17.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5070
CVE ID: CVE-2023-31921 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:23:42.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5068
CVE ID: CVE-2023-31922 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:21:01.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component js_proxy_isArray at quickjs.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bellard/quickjs/issues/178
CVE ID: CVE-2023-31923 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T15:22:20.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side validation, which can be exploited to gain full administrator privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nobugescapes.com/blog/creating-a-new-user-with-admin-privilege/
CVE ID: CVE-2023-31925 State: PUBLISHED Published: 2023-08-31T00:20:30.874Z Last Updated: 2024-09-27T19:12:13.928Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-312 Description: Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
an SNMP communication log dump. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22506
CVE ID: CVE-2023-31926 State: PUBLISHED Published: 2023-08-02T00:22:14.166Z Last Updated: 2025-02-13T16:50:15.001Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Brocade Products: Fabric OS Problem Types: CWE-281, CWE-665 Description: System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/22388 - https://security.netapp.com/advisory/ntap-20230908-0007/
CVE ID: CVE-2023-31927 State: PUBLISHED Published: 2023-08-02T00:06:48.374Z Last Updated: 2025-02-13T16:50:15.523Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Brocade Products: Fabric OS Problem Types: CWE-200 Description: An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get technical details about the web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/22389 - https://security.netapp.com/advisory/ntap-20230908-0007/
CVE ID: CVE-2023-31928 State: PUBLISHED Published: 2023-08-01T23:53:58.100Z Last Updated: 2025-02-13T16:50:16.098Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Brocade Products: Fabric OS Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisorie
al Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/22390 - https://security.netapp.com/advisory/ntap-20230908-0007/
CVE ID: CVE-2023-31932 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-08-02T15:03:28.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug5-SQL-Injection-viewid.md
CVE ID: CVE-2023-31933 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-08-02T15:03:28.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug4-SQL-Injection-editid2.md
CVE ID: CVE-2023-31934 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-08-02T15:03:28.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug1-XSS-in-Admin-Name.md
CVE ID: CVE-2023-31935 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-08-02T15:03:28.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug1-XSS-in-Admin-Name.md - https://github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug2-XSS-in-Email-address.md
CVE ID: CVE-2023-31936 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-11-27T14:28:22.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug6-SQL-Injection-viewid2.md
CVE ID: CVE-2023-31937 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-08-02T15:03:28.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Rail-Pass-Management-System/bug3-SQL-Injection-editid.md
CVE ID: CVE-2023-31938 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-07T17:56:18.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug2-SQL-Injection-emp_id.md
CVE ID: CVE-2023-31939 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-07T17:56:03.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug4-SQL-Injection-costomer_id.md
CVE ID: CVE-2023-31940 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-07T17:55:46.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug7-SQL-Injection-page_id.md
CVE ID: CVE-2023-31941 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T15:59:33.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug1-File%20upload.md
CVE ID: CVE-2023-31942 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T15:12:46.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug9-XSS-description.md
CVE ID: CVE-2023-31943 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T15:12:06.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug6-SQL-Injection-ticket_id.md
CVE ID: CVE-2023-31944 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T15:11:38.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug3-SQL-Injection-emp_id2.md
CVE ID: CVE-2023-31945 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T15:09:48.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug5-SQL-Injection-id.md