Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-4913 State: PUBLISHED Published: 2024-05-15T21:00:05.277Z Last Updated: 2024-08-01T20:55:10.271Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Examination System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Online Examination System 1.0. This vulnerability affects unknown code of the file exam.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264448. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
ifier of this vulnerability is VDB-264448. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264448 - https://vuldb.com/?ctiid.264448 - https://vuldb.com/?submit.333403 - https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_exam.md
CVE ID: CVE-2024-4914 State: PUBLISHED Published: 2024-05-15T21:31:04.114Z Last Updated: 2024-08-01T20:55:10.267Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Examination System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. This issue affects some unknown processing of the file ranking-exam.php. The manipulation of the argument exam_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264449 was assigned to this vulnerability. Additional Analyst Notes: - CISA A
public and may be used. The identifier VDB-264449 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264449 - https://vuldb.com/?ctiid.264449 - https://vuldb.com/?submit.333407 - https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_ranking-exam.md
CVE ID: CVE-2024-4915 State: PUBLISHED Published: 2024-05-15T22:00:04.867Z Last Updated: 2024-08-01T20:55:10.195Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Examination System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. Affected is an unknown function of the file result.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-264450 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - C
sed. VDB-264450 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264450 - https://vuldb.com/?ctiid.264450 - https://vuldb.com/?submit.333408 - https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_result.md
CVE ID: CVE-2024-4916 State: PUBLISHED Published: 2024-05-15T22:31:04.321Z Last Updated: 2024-08-01T20:55:10.258Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Examination System Problem Types: CWE-89 Description: A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file selExamAttemptExe.php. The manipulation of the argument thisId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264451. Additional Analyst Not
sed to the public and may be used. The associated identifier of this vulnerability is VDB-264451. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264451 - https://vuldb.com/?ctiid.264451 - https://vuldb.com/?submit.333409 - https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_selExamAttemptExe.md
CVE ID: CVE-2024-4917 State: PUBLISHED Published: 2024-05-15T23:00:05.150Z Last Updated: 2024-08-01T20:55:10.269Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Examination System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Online Examination System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file submitAnswerExe.php. The manipulation of the argument exmne_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264452. Additional Analyst Notes: - CISA ADP Vulnric
public and may be used. The identifier of this vulnerability is VDB-264452. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264452 - https://vuldb.com/?ctiid.264452 - https://vuldb.com/?submit.333410 - https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_submitAnswerExe.md
CVE ID: CVE-2024-4918 State: PUBLISHED Published: 2024-05-15T23:00:06.529Z Last Updated: 2024-08-01T20:55:10.284Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Examination System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. This affects an unknown part of the file updateQuestion.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264453 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrich
may be used. The identifier VDB-264453 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264453 - https://vuldb.com/?ctiid.264453 - https://vuldb.com/?submit.333415 - https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_updateQuestion.md
CVE ID: CVE-2024-4919 State: PUBLISHED Published: 2024-05-15T23:31:04.708Z Last Updated: 2024-08-01T20:55:10.280Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Examination System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/addCourseExe.php. The manipulation of the argument course_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-264454 is the identifier assigned to this vulnerability. Additional Analy
n disclosed to the public and may be used. VDB-264454 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264454 - https://vuldb.com/?ctiid.264454 - https://vuldb.com/?submit.333416 - https://github.com/yylmm/CVE/blob/main/Online%20Examination%20System%20With%20Timer/SQL_addCourseExe.md
CVE ID: CVE-2024-4920 State: PUBLISHED Published: 2024-05-16T00:00:04.917Z Last Updated: 2024-08-01T20:55:10.266Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Discussion Forum Site Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file registerH.php. The manipulation of the argument ima leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264455. Additional Analyst Notes:
to the public and may be used. The associated identifier of this vulnerability is VDB-264455. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264455 - https://vuldb.com/?ctiid.264455 - https://vuldb.com/?submit.333477 - https://github.com/CveSecLook/cve/issues/27
CVE ID: CVE-2024-4921 State: PUBLISHED Published: 2024-05-16T00:31:04.604Z Last Updated: 2024-08-01T20:55:10.298Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee and Visitor Gate Pass Logging System Problem Types: CWE-434 Description: A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /employee_gatepass/classes/Users.php?f=ssave. The manipulation of the argument img leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnera
launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264456. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264456 - https://vuldb.com/?ctiid.264456 - https://vuldb.com/?submit.333662 - https://github.com/I-Schnee-I/cev/blob/main/upload.md
CVE ID: CVE-2024-4922 State: PUBLISHED Published: 2024-05-16T01:00:06.723Z Last Updated: 2024-08-01T20:55:10.229Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Image Stack Website Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Simple Image Stack Website 1.0. This affects an unknown part. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264459. Additional Analyst Notes: - CISA ADP Vulnrichment: - C
d. The associated identifier of this vulnerability is VDB-264459. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264459 - https://vuldb.com/?ctiid.264459 - https://vuldb.com/?submit.333760 - https://github.com/HuoMingZ/aoligei/blob/main/ceshi.md
CVE ID: CVE-2024-4923 State: PUBLISHED Published: 2024-05-16T01:31:03.842Z Last Updated: 2024-08-01T20:55:10.274Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: E-Commerce Site Problem Types: CWE-434 Description: A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264460. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
sed. The identifier of this vulnerability is VDB-264460. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264460 - https://vuldb.com/?ctiid.264460 - https://vuldb.com/?submit.333874 - https://github.com/polaris0x1/CVE/issues/1
CVE ID: CVE-2024-4924 State: PUBLISHED Published: 2024-06-12T06:00:02.287Z Last Updated: 2024-10-28T20:16:31.603Z Vendors: Unknown Products: Social Sharing Plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/1867505f-d112-4919-9fd5-01745aa0433e/
CVE ID: CVE-2024-4925 State: PUBLISHED Published: 2024-05-16T01:31:05.274Z Last Updated: 2024-08-01T20:55:10.305Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: School Intramurals Student Attendance Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /intrams_sams/manage_course.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264461 was
k may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264461 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264461 - https://vuldb.com/?ctiid.264461 - https://vuldb.com/?submit.333875 - https://github.com/Hefei-Coffee/cve/blob/main/sql6.md
CVE ID: CVE-2024-4926 State: PUBLISHED Published: 2024-05-16T02:00:04.407Z Last Updated: 2024-08-01T20:55:10.267Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: School Intramurals Student Attendance Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /intrams_sams/manage_student.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-264462 is the iden
ible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-264462 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264462 - https://vuldb.com/?ctiid.264462 - https://vuldb.com/?submit.333879 - https://github.com/Hefei-Coffee/cve/blob/main/sql7.md
CVE ID: CVE-2024-4927 State: PUBLISHED Published: 2024-05-16T02:31:03.908Z Last Updated: 2024-08-01T20:55:10.301Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Online Bidding System Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /simple-online-bidding-system/admin/ajax.php?action=save_product. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulner
aunched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264463. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264463 - https://vuldb.com/?ctiid.264463 - https://vuldb.com/?submit.333891 - https://github.com/Hefei-Coffee/cve/blob/main/upload2.md
CVE ID: CVE-2024-4928 State: PUBLISHED Published: 2024-05-16T03:00:05.075Z Last Updated: 2024-08-01T20:55:10.255Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Online Bidding System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /simple-online-bidding-system/admin/ajax.php?action=delete_category. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabili
y be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264464. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264464 - https://vuldb.com/?ctiid.264464 - https://vuldb.com/?submit.333893 - https://github.com/Hefei-Coffee/cve/blob/main/sql8.md
CVE ID: CVE-2024-4929 State: PUBLISHED Published: 2024-05-16T03:31:04.697Z Last Updated: 2024-08-01T20:55:10.237Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Online Bidding System Problem Types: CWE-352 Description: A vulnerability classified as problematic has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/admin/ajax.php?action=save_user. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264465 was assigned to this vulnerability
e exploit has been disclosed to the public and may be used. The identifier VDB-264465 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264465 - https://vuldb.com/?ctiid.264465 - https://vuldb.com/?submit.333894 - https://github.com/Hefei-Coffee/cve/blob/main/csrf.md
CVE ID: CVE-2024-4930 State: PUBLISHED Published: 2024-05-16T04:00:04.746Z Last Updated: 2024-08-01T20:55:10.293Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Online Bidding System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Simple Online Bidding System 1.0. This vulnerability affects unknown code of the file /simple-online-bidding-system/index.php?page=view_prod. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-264466 is the identifier assigned to this vulnerability. Additi
it has been disclosed to the public and may be used. VDB-264466 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264466 - https://vuldb.com/?ctiid.264466 - https://vuldb.com/?submit.335343 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester%20Simple%20Online%20Bidding%20System%20Sql%20Inject-1.md
CVE ID: CVE-2024-4931 State: PUBLISHED Published: 2024-05-16T04:31:03.974Z Last Updated: 2024-08-01T20:55:10.318Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Online Bidding System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Bidding System 1.0. This issue affects some unknown processing of the file /simple-online-bidding-system/admin/index.php?page=view_udet. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnera
tiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264467. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264467 - https://vuldb.com/?ctiid.264467 - https://vuldb.com/?submit.335365 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester%20Simple%20Online%20Bidding%20System%20Sql%20Inject-2.md
CVE ID: CVE-2024-4932 State: PUBLISHED Published: 2024-05-16T04:31:05.376Z Last Updated: 2024-08-01T20:55:10.273Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Online Bidding System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Bidding System 1.0. Affected is an unknown function of the file /simple-online-bidding-system/admin/index.php?page=manage_user. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264
remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264468. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264468 - https://vuldb.com/?ctiid.264468 - https://vuldb.com/?submit.335366 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester%20Simple%20Online%20Bidding%20System%20Sql%20Inject-3.md
CVE ID: CVE-2024-4933 State: PUBLISHED Published: 2024-05-16T05:00:04.217Z Last Updated: 2024-08-01T20:55:10.325Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Online Bidding System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Simple Online Bidding System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /simple-online-bidding-system/admin/index.php?page=manage_product. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264469 was
ck can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264469 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.264469 - https://vuldb.com/?ctiid.264469 - https://vuldb.com/?submit.335367 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester%20Simple%20Online%20Bidding%20System%20Sql%20Inject-4.md
CVE ID: CVE-2024-4934 State: PUBLISHED Published: 2024-07-01T06:00:01.172Z Last Updated: 2024-08-01T20:55:10.243Z Vendors: Unknown Products: Quiz and Survey Master (QSM) Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields before outputting them back in a page/post where the Quiz is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/a2270ee1-3211-4b16-b3d7-6cdd732f7155/
CVE ID: CVE-2024-4936 State: PUBLISHED Published: 2024-06-14T04:36:55.457Z Last Updated: 2024-08-01T20:55:10.310Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: flightbycanto Products: Canto Problem Types: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Description: The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required allow_url_include to be enabled on the target site in ord
iles on the server, resulting in code execution. This required allow_url_include to be enabled on the target site in order to exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/95a68ae0-36da-499b-a09d-4c91db8aa338?source=cve - https://plugins.trac.wordpress.org/browser/canto/trunk/includes/lib/sizes.php#L15
CVE ID: CVE-2024-4938 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:33.420Z Description: No description available.