Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-41471 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T20:31:47.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xxhzz1/74cmsSE-Improper-permission-configuration-vulnerability/issues/1
CVE ID: CVE-2022-41472 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T20:35:08.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74cmsSE v3.12.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xxhzz1/74cmsSE-Storage-cross-site-scripting-vulnerability/issues/1
CVE ID: CVE-2022-41473 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T14:38:04.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ralap-z/rpcms/issues/1
CVE ID: CVE-2022-41474 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T14:36:02.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ralap-z/rpcms/issues/3
CVE ID: CVE-2022-41475 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T14:33:37.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ralap-z/rpcms/issues/2
CVE ID: CVE-2022-41477 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:17:55.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zer0yu/CVE_Request/blob/master/Webid/WeBid_Path_Traversal.md
CVE ID: CVE-2022-41479 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-15T15:34:46.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter. This leads to an Insecure Direct Object References (IDOR) vulnerability which allows attackers to access the application source code. NOTE: the vendor disputes this because the retrieved source code is only the DevExpress client-side application code that is, of course, intentionally readable by web browsers (a site's custom code and data is ne
nt-side application code that is, of course, intentionally readable by web browsers (a site's custom code and data is never accessible via an IDOR approach). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/DevExpress/tree/main/ASP.NET_Web_Forms_Build_19.2.3 - https://supportcenter.devexpress.com/ticket/details/t1171808/penetration-test-idor-source-code-cve-2022-41479 - https://supportcenter.devexpress.com/ticket/details/t190349/false-positive-vulnerabilities-known-alerts-detected-by-various-security-scanners-and
CVE ID: CVE-2022-41480 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:15:27.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x475dc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/detail-3794.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-AC6-%200x47c5dc%20-%20name.md
CVE ID: CVE-2022-41481 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:25:48.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47de1c function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/detail-3794.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-AC6-%200x47de1c.md
CVE ID: CVE-2022-41482 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:24:52.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47c5dc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/detail-3794.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-AC6-%200x47c5dc_value.md
CVE ID: CVE-2022-41483 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:23:34.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x4a12cc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/detail-3794.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-AC6-%200x4212cc.md
CVE ID: CVE-2022-41484 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:22:34.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1900 AP500(US)_V1_180320(Beta) was discovered to contain a buffer overflow in the 0x32384 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/support/download/ap500/#Firmware - https://github.com/Davidteeri/Bug-Report/blob/main/tplink-AC1900%20.md
CVE ID: CVE-2022-41485 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:20:59.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/detail-3794.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-AC6-%200x47ce00.md
CVE ID: CVE-2022-41489 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:19:24.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usb_upload.htm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/wayos/wayos_LQ-09%2022_enterprise-class/3_csrf.md
CVE ID: CVE-2022-41495 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:18:36.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jayus0821/insight/blob/master/ClipperCMS%20SSRF2.md
CVE ID: CVE-2022-41496 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:14:38.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jayus0821/insight/blob/master/iCMS%20SSRF.md
CVE ID: CVE-2022-41497 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T15:14:05.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jayus0821/insight/blob/master/ClipperCMS%20SSRF.md
CVE ID: CVE-2022-41498 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T15:35:18.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aurigee/bug_report/blob/main/vendors/mayuri_k/billing-system-project/SQLi-1.md
CVE ID: CVE-2022-41500 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-15T15:32:24.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/27#issue-1410014422
CVE ID: CVE-2022-41504 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-15T15:02:15.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cx852/bug_report/blob/main/vendors/mayuri_k/billing-system-project/RCE-1.md
CVE ID: CVE-2022-41505 State: PUBLISHED Published: 2023-01-23T00:00:00.000Z Last Updated: 2025-04-03T14:25:54.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hemant70072/Access-control-issue-in-TP-Link-Tapo-C200-V1.
CVE ID: CVE-2022-41512 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:42:46.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TGAyouman/bug_report/blob/main/vendors/mayuri_k/online-diagnostic-lab-management-system/RCE-1.md
CVE ID: CVE-2022-41513 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:42:46.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TGAyouman/bug_report/blob/main/vendors/mayuri_k/online-diagnostic-lab-management-system/SQLi-1.md
CVE ID: CVE-2022-41514 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:42:46.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_loan. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TGAyouman/bug_report/blob/main/vendors/mayuri_k/open-source-sacco-management-system/SQLi-1.md
CVE ID: CVE-2022-41515 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:42:46.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_payment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TGAyouman/bug_report/blob/main/vendors/mayuri_k/open-source-sacco-management-system/SQLi-2.md
CVE ID: CVE-2022-41517 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/TOTOLink-NR1800X-f97f2b9552c04eaf85fce31bccbfcf04
CVE ID: CVE-2022-41518 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-command-injection-UploadFirmwareFile-a98e96086d824b7d8b788a8639322457
CVE ID: CVE-2022-41520 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter in the UploadCustomModule function. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-bof-UploadCustomModule-2bcabf2017084213b9a238fab938d782
CVE ID: CVE-2022-41521 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort parameter in the setIpPortFilterRules function. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-bof-setIpPortFilterRules-fd99f83f37ad40fab7d7b376942633d2
CVE ID: CVE-2022-41522 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-bof-main-pre-authentication-29ccdaa7af054674828f7b3cf38aae82
CVE ID: CVE-2022-41523 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-bof-setTracerouteCfg-0e29fc2fcba74a28a3e3822d71ddb2ef
CVE ID: CVE-2022-41524 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-bof-setParentalRules-0da79b5ce7d44212b275a33b77935a42
CVE ID: CVE-2022-41525 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-command-injection-setOpModeCfg-7b10868ba53544148d9aa3100b5df5cc
CVE ID: CVE-2022-41526 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-bof-setDiagnosisCfg-fcbc55a98e4b4bfbb94db610e666e834
CVE ID: CVE-2022-41527 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-bof-setOpModeCfg-2e286823203c405bbdec4305b0924a02
CVE ID: CVE-2022-41528 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:42:46.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function. Additional Analyst Notes: - CVE Program Container: References: - https://brief-nymphea-813.notion.site/NR1800X-bof-setSmsCfg-0f2be43baa9842d79ae6bafbded574f8
CVE ID: CVE-2022-41530 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:36:42.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_borrower. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yueleve/bug_report/blob/main/vendots/mayuri_k/open-source-sacco-management-system/SQLi-2.md
CVE ID: CVE-2022-41532 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T15:59:18.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_plan. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yueleve/bug_report/blob/main/vendots/mayuri_k/open-source-sacco-management-system/SQLi-1.md
CVE ID: CVE-2022-41533 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T14:30:41.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuewawa/bug_report/blob/main/vendors/mayuri_k/online-diagnostic-lab-management-system/RCE-1.md
CVE ID: CVE-2022-41534 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T14:29:20.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuewawa/bug_report/blob/main/vendors/mayuri_k/online-diagnostic-lab-management-system/RCE-2.md
CVE ID: CVE-2022-41535 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:16:25.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_borrower.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/coues/bug_report/blob/main/vendors/mayuri_k/open-source-sacco-management-system/SQLi-1.md
CVE ID: CVE-2022-41536 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:15:11.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_user.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/coues/bug_report/blob/main/vendors/mayuri_k/open-source-sacco-management-system/SQLi-2.md
CVE ID: CVE-2022-41537 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-15T15:01:01.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /user_operations/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SmallDarkRoom1/bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/RCE-1.md
CVE ID: CVE-2022-41538 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:10:01.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Management-PHP/admin/photos_add.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gougou123-hash/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md