Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
icious user would have to convince a user to click on an untrusted link through a social engineering attack or successfully perform a Cross Site Scripting Attack (XSS). Exploitation of a CSRF could potentially lead to sensitive information disclosure and full remote access to the affected products. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139760
CVE ID: CVE-2023-2747 State: PUBLISHED Published: 2023-06-15T19:49:29.785Z Last Updated: 2024-12-11T20:59:11.466Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: silabs.com Products: GSDK Problem Types: CWE-1204 Description: The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U2sFvQAJ?operationContext=S1 - https://github.com/SiliconLabs/gecko_sdk
CVE ID: CVE-2023-2749 State: PUBLISHED Published: 2023-05-31T08:36:37.182Z Last Updated: 2025-01-09T21:02:15.236Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: ASUSTOR Products: Download Center Problem Types: CWE-200 Description: Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability to gain unauthorized access to sensitive files or directories without appropriate permission restrictions. Download Center on ADM 4.0 and above will be affected. Affected products and versions include: Download Center 1.1.5.r1280 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
clude: Download Center 1.1.5.r1280 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.asustor.com/security/security_advisory_detail?id=24
CVE ID: CVE-2023-2750 State: PUBLISHED Published: 2023-05-24T11:44:39.395Z Last Updated: 2025-01-16T15:38:28.748Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cityboss Products: E-municipality Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cityboss E-municipality allows SQL Injection.This issue affects E-municipality: before 6.05. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0286
CVE ID: CVE-2023-2751 State: PUBLISHED Published: 2023-06-19T10:52:52.446Z Last Updated: 2024-12-11T20:42:41.257Z Vendors: Unknown Products: Upload Resume Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1b0fe0ac-d0d1-473d-af5b-dad6217933d4
CVE ID: CVE-2023-2752 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:21:20.965Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/efdf5b24-6d30-4d57-a5b0-13b253ba3ea4 - https://github.com/thorsten/phpmyfaq/commit/e7599d49b0ece7ceef3a4e8d334782cc3df98be8
CVE ID: CVE-2023-2753 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-22T18:09:14.940Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/eca2284d-e81a-4ab8-91bb-7afeca557628 - https://github.com/thorsten/phpmyfaq/commit/5401ab75d022932b8d5d7adaa771acf44fed18ba
CVE ID: CVE-2023-2754 State: PUBLISHED Published: 2023-08-03T13:53:00.634Z Last Updated: 2024-10-17T14:12:44.334Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Cloudflare Products: WARP Problem Types: CWE-319 Description: The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over an IPv6-capable network, te WARP client did not assign loopback IPv6 addresses but Unique Local Addresses, which under certain conditions could point towards unknown devices in the same local network which enables an Attacker
, which under certain conditions could point towards unknown devices in the same local network which enables an Attacker to view DNS queries made by the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release - https://github.com/cloudflare/advisories/security/advisories/GHSA-mv6g-7577-vq4w - https://developers.cloudflare.com/warp-client/
CVE ID: CVE-2023-2756 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-22T18:08:00.855Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: pimcore Products: pimcore/customer-data-framework Problem Types: CWE-89 Description: SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/cf398528-819f-456e-88e7-c06d268d3f44 - https://github.com/pimcore/customer-data-framework/commit/76df151737b7964ce5169fdf9e27a0ad801757fe
CVE ID: CVE-2023-2757 State: PUBLISHED Published: 2023-05-18T02:04:29.070Z Last Updated: 2025-02-05T19:44:58.606Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: pluginbuilders Products: Waiting: One-click countdowns Problem Types: CWE-862 Missing Authorization Description: The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in versions up to, and including, 0.6.2. This could lead to Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for subscriber-level attackers to access functions to save plugin data that ca
d output escaping. This makes it possible for subscriber-level attackers to access functions to save plugin data that can potentially lead to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/38cc5a39-6ec3-4ce9-b9ad-d4ca5dafe9a7?source=cve - https://plugins.trac.wordpress.org/browser/waiting/tags/0.6.2/templates/templates.php#L426 - https://plugins.trac.wordpress.org/browser/waiting/tags/0.6.2/waiting.php#L544
CVE ID: CVE-2023-2758 State: PUBLISHED Published: 2023-05-31T14:09:49.809Z Last Updated: 2025-01-09T20:26:25.295Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Contec Products: CONPROSYS HMI System Problem Types: CWE-799 Description: A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-21 - https://jvn.jp/en/vu/JVNVU93372935/inde
nrichment: References: - https://www.tenable.com/security/research/tra-2023-21 - https://jvn.jp/en/vu/JVNVU93372935/index.html
CVE ID: CVE-2023-2759 State: PUBLISHED Published: 2023-07-17T06:14:15.872Z Last Updated: 2024-10-30T14:55:16.810Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: TAPHOME Products: Core Platform Problem Types: CWE-863 Description: A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://claroty.com/team82/disclosure-dashboard/cve-2023-2759
CVE ID: CVE-2023-2760 State: PUBLISHED Published: 2023-07-17T06:14:32.851Z Last Updated: 2024-10-22T13:58:08.435Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: TAPHOME Products: Core Platform Problem Types: CWE-89 Description: An SQL injection vulnerability exists in TapHome core HandleMessageUpdateDevicePropertiesRequest function before version 2023.2, allowing low privileged users to inject arbitrary SQL directives into an SQL query and execute arbitrary SQL commands and get full reading access. This may also lead to limited write access and temporary Denial-of-Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
and temporary Denial-of-Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://claroty.com/team82/disclosure-dashboard/cve-2023-2759
CVE ID: CVE-2023-2761 State: PUBLISHED Published: 2023-07-24T10:20:26.121Z Last Updated: 2024-10-24T15:03:30.446Z Vendors: Unknown Products: User Activity Log Problem Types: CWE-89 SQL Injection Description: The User Activity Log WordPress plugin before 1.6.3 does not properly sanitise and escape the `txtsearch` parameter before using it in a SQL statement in some admin pages, leading to a SQL injection exploitable by high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8c82d317-f9f9-4e25-a7f1-43edb77e8aba
CVE ID: CVE-2023-2762 State: PUBLISHED Published: 2023-07-12T07:05:26.301Z Last Updated: 2024-11-07T18:16:32.428Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS Desktop Problem Types: CWE-416 Description: A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2023-2763 State: PUBLISHED Published: 2023-07-12T07:05:33.333Z Last Updated: 2024-09-05T14:18:20.743Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS Desktop Problem Types: CWE-416, CWE-787, CWE-122 Description: Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
e while opening a specially crafted DWG or DXF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2023-2764 State: PUBLISHED Published: 2023-06-09T05:33:11.613Z Last Updated: 2024-12-20T23:47:35.399Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: croixhaug Products: Interactive Image Map Plugin – Draw Attention Problem Types: CWE-862 Missing Authorization Description: The Draw Attention plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_set_featured_image function in versions up to, and including, 2.0.11. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change the featured image of arbitrary posts with an image that exists in
ith subscriber-level permissions and above, to change the featured image of arbitrary posts with an image that exists in the media library. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/18530601-a294-448c-a1b2-c3995f9042ac?source=cve - https://plugins.trac.wordpress.org/browser/draw-attention/trunk/public/includes/lib/drag-drop-featured-image/index.php#L500 - https://plugins.trac.wordpress.org/changeset/2917528/
CVE ID: CVE-2023-2765 State: PUBLISHED Published: 2023-05-17T16:31:03.333Z Last Updated: 2024-08-02T06:33:05.773Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Weaver Products: OA Problem Types: CWE-36 Description: A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-229270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early abo
c and may be used. VDB-229270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229270 - https://vuldb.com/?ctiid.229270 - https://github.com/eckert-lcc/cve/blob/main/Weaver%20oa.md
CVE ID: CVE-2023-2766 State: PUBLISHED Published: 2023-05-17T16:31:04.349Z Last Updated: 2024-08-02T06:33:05.602Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Weaver Products: OA Problem Types: CWE-552 Description: A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229271. NOTE: The vendor was contacted ear
ublic and may be used. The associated identifier of this vulnerability is VDB-229271. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229271 - https://vuldb.com/?ctiid.229271 - https://github.com/8079048q/cve/blob/main/weaveroa.md
CVE ID: CVE-2023-2767 State: PUBLISHED Published: 2023-06-09T05:33:13.295Z Last Updated: 2025-02-05T19:43:26.803Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: nickboss, Unknown Products: WordPress File Upload, WordPress File Upload Pro Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 4.19.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with admini
to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/23334d94-e5b8-4c88-8765-02ad19e17248?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2915978%40wp-file-upload%2Ftrunk&old=2909107%40wp-file-uploa
wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2915978%40wp-file-upload%2Ftrunk&old=2909107%40wp-file-upload%2Ftrunk&sfp_email=&sfph_mail=#file2
CVE ID: CVE-2023-2768 State: PUBLISHED Published: 2023-05-17T17:00:03.679Z Last Updated: 2024-11-22T15:42:10.893Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Sucms Problem Types: CWE-79 Description: A vulnerability was found in Sucms 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin_ads.php?action=add. The manipulation of the argument intro leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-229274 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.229274 - https://vuldb.com/?ctiid.229274 - https://github.com/Upgradeextension/Sucms-v1.0/blob/main/README.md
CVE ID: CVE-2023-2769 State: PUBLISHED Published: 2023-05-17T17:31:03.343Z Last Updated: 2024-08-02T06:33:05.576Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Service Provider Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_service. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229275. Additi
has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229275. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229275 - https://vuldb.com/?ctiid.229275 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Serviced-Providerd-Managementd-Systemd--d-SQLd-injections.md
CVE ID: CVE-2023-2770 State: PUBLISHED Published: 2023-05-17T18:00:04.299Z Last Updated: 2024-08-02T06:33:05.599Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Exam System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229276. Additional Analyst Notes: - CVE Program Container: Referenc
be used. The identifier of this vulnerability is VDB-229276. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229276 - https://vuldb.com/?ctiid.229276 - https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md
CVE ID: CVE-2023-2771 State: PUBLISHED Published: 2023-05-17T18:31:03.622Z Last Updated: 2024-08-02T06:33:05.598Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Exam System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229277 was assigned to this vulnerability. Additional Analyst Notes:
to the public and may be used. The identifier VDB-229277 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229277 - https://vuldb.com/?ctiid.229277 - https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md
CVE ID: CVE-2023-2772 State: PUBLISHED Published: 2023-05-17T18:31:04.581Z Last Updated: 2024-11-22T19:50:41.130Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Budget and Expense Tracker System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/manage_budget.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-229278 is the identifier
launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-229278 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.229278 - https://vuldb.com/?ctiid.229278 - https://github.com/wucwu1/CVEApplication/blob/main/SQL.md
CVE ID: CVE-2023-2773 State: PUBLISHED Published: 2023-05-17T19:00:05.244Z Last Updated: 2024-08-02T06:33:05.476Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Bus Dispatch and Information System Problem Types: CWE-89 Description: A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file view_admin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229279.
xploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229279. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229279 - https://vuldb.com/?ctiid.229279 - https://gitee.com/zyz0103/system-vul/blob/master/Bus%20Dispatch%20and%20Information%20System%20in%20adminid%20has%20Sql%20injection%20vulnerabilities.pdf
CVE ID: CVE-2023-2774 State: PUBLISHED Published: 2023-05-17T19:31:02.929Z Last Updated: 2025-01-16T19:01:10.082Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Bus Dispatch and Information System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file view_branch.php. The manipulation of the argument branchid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229280. Additional Analyst N
s been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229280. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.229280 - https://vuldb.com/?ctiid.229280 - https://github.com/mrwwrrhh/Bus_Dispatch_and_Information_System/blob/main/Bus%20Dispatch%20and%20Information%20System%20in%20view_branch%20%20has%20Sql%20injection%20vulnerabilities.pdf