Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-41396 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:44:50.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via the IPsecLocalNet and IPsecRemoteNet parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/tenda_ac1200_router/ - https://boschko.ca/tenda_ac1200_router
CVE ID: CVE-2022-41397 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T17:52:54.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassKey") to encrypt and decrypt secrets stored in configuration files and in database tables. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sage.com/en-ca/products/sage-300/
CVE ID: CVE-2022-41398 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T16:45:53.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr instance. This issue could allow attackers to login to the Solr dashboard with admin privileges and access sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sage.com/en-ca/products/sage-300/
CVE ID: CVE-2022-41399 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T16:45:01.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte blowfish key ("PASS_KEY") to encrypt and decrypt the database connection string for the PORTAL database found in the "dbconfig.xml". This issue could allow attackers to obtain access to the SQL database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sage.com/en-ca/products/sage-300/
CVE ID: CVE-2022-41400 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T20:35:22.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user passwords and SQL connection strings stored in ISAM database files in the shared data directory. This issue could allow attackers to decrypt user passwords and SQL connection strings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sage.com/en-ca/products/sage-300/
CVE ID: CVE-2022-41401 State: PUBLISHED Published: 2023-08-04T00:00:00 Last Updated: 2024-10-17T15:42:26.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenRefine/OpenRefine/blob/30d6edb7b6586623bda09456c797c35983fb80ff/main/tests/server/src/com/google/refine/importing/ImportingUtilitiesTests.java#L180 - https://github.com/OpenRefine/Open
main/tests/server/src/com/google/refine/importing/ImportingUtilitiesTests.java#L180 - https://github.com/OpenRefine/OpenRefine/blob/cb55cdfdf6f9ca916839778dc847cce803688998/main/src/com/google/refine/importing/ImportingUtilities.java#L103 - https://github.com/ixSly/CVE-2022-41401
CVE ID: CVE-2022-41403 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:25:16.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/so_newletter_custom_popup/newsletter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/168412/OpenCart-3.x-Newsletter-Custom-Popup-4.0-SQL-Injection.html
CVE ID: CVE-2022-41404 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-06-09T15:16:41.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/ini4j/bugs/56/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html - https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2022/CVE-2022-41404
CVE ID: CVE-2022-41406 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T17:45:59.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CokuTau-CH/Bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/RCE-1.md
CVE ID: CVE-2022-41407 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:34:07.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CokuTau-CH/Bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/SQLi-2.md
CVE ID: CVE-2022-41408 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-19T20:35:35.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.github.com
CVE ID: CVE-2022-41409 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T18:22:42.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PCRE2Project/pcre2/issues/141 - https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35
CVE ID: CVE-2022-41412 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:43:49.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/renmizo/CVE-2022-41412 - http://packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html
CVE ID: CVE-2022-41413 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-05-02T19:15:31.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/renmizo/CVE-2022-41413 - http://packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html - http://packetstormsecurity.com/files/171629/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html
CVE ID: CVE-2022-41414 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:42:46.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and pages. Additional Analyst Notes: - CVE Program Container: References: - https://portal.liferay.dev/learn/security/known-vulnerabilities
CVE ID: CVE-2022-41415 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T20:20:49.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a Denial of Service (DoS) via injecting crafted shellcode into the NVRAM variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://acer.com - http://altos.com - https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-41415/CVE-2022-41415.md
CVE ID: CVE-2022-41416 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:22:05.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/update_booking.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ouoer/bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-1.md
CVE ID: CVE-2022-41417 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-03T19:00:11.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BlogEngine/BlogEngine.NET/commit/7f927567db94462ffd37e128c0a53c11c1f81a8d - https://gist.github.com/tree-chtsec/22a0a531ea188fd5b76fe11d32f41e95
CVE ID: CVE-2022-41418 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T15:02:56.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BlogEngine/BlogEngine.NET/commit/7f927567db94462ffd37e128c0a53c11c1f81a8d - https://gist.github.com/tree-chtsec/22a0a531ea188fd5b76fe11d32f41e95 - https://gist.github.com/tree-chtsec/a02258bb6dea0d16e7e631898c066e05 - https://www
ec/22a0a531ea188fd5b76fe11d32f41e95 - https://gist.github.com/tree-chtsec/a02258bb6dea0d16e7e631898c066e05 - https://www.chtsecurity.com/news/8719b7f3-1129-4fb4-8801-298970d81df7
CVE ID: CVE-2022-41419 State: PUBLISHED Published: 2022-10-03T13:51:25 Last Updated: 2024-08-03T12:42:46.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_Processor::Process function in the mp4encrypt binary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/766
CVE ID: CVE-2022-41420 State: PUBLISHED Published: 2022-10-03T13:51:26 Last Updated: 2024-08-03T12:42:46.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392810
CVE ID: CVE-2022-41423 State: PUBLISHED Published: 2022-10-03T13:51:27 Last Updated: 2024-08-03T12:42:46.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/767
CVE ID: CVE-2022-41424 State: PUBLISHED Published: 2022-10-03T13:51:27 Last Updated: 2024-08-03T12:42:46.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_SttsAtom::Create function in mp42hls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/768
CVE ID: CVE-2022-41425 State: PUBLISHED Published: 2022-10-03T13:51:28 Last Updated: 2024-08-03T12:42:46.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4decrypt. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/772
CVE ID: CVE-2022-41426 State: PUBLISHED Published: 2022-10-03T13:51:29 Last Updated: 2024-08-03T12:42:46.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_AtomFactory::CreateAtomFromStream function in mp4split. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/772
CVE ID: CVE-2022-41427 State: PUBLISHED Published: 2022-10-03T13:51:30 Last Updated: 2024-08-03T12:42:46.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4_AvcFrameParser::Feed function in mp4mux. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/772
CVE ID: CVE-2022-41428 State: PUBLISHED Published: 2022-10-03T13:51:31 Last Updated: 2024-08-03T12:42:46.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/773
CVE ID: CVE-2022-41429 State: PUBLISHED Published: 2022-10-03T13:51:32 Last Updated: 2024-08-03T12:42:46.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/773
CVE ID: CVE-2022-41430 State: PUBLISHED Published: 2022-10-03T13:51:33 Last Updated: 2024-08-03T12:42:46.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/773
CVE ID: CVE-2022-41431 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T20:30:17.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: xzs v3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /admin/question/edit. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mindskip/xzs - https://sudsy-fish-73d.notion.site/XSS-about-xzs-system-31f689f2f3014ba99f12423fae521e49 - https://www.mindskip.net/xzs.html%3B - https://github.com
n.site/XSS-about-xzs-system-31f689f2f3014ba99f12423fae521e49 - https://www.mindskip.net/xzs.html%3B - https://github.com/mindskip/xzs.aa
CVE ID: CVE-2022-41432 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:32:03.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /module/report_event/index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/delyura/bda0b16cf99cb14bb767db84e5110419
CVE ID: CVE-2022-41433 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:30:50.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /module/admin_bp/add_application.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/delyura/b7419cab29f4105df1c1fbe5d99edd7c
CVE ID: CVE-2022-41434 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:29:06.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /lilac/main.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/delyura/83553302a1960311c8c4c8cc4a974577
CVE ID: CVE-2022-41435 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:31:35.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted public key comments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openwrt/luci/commit/944b55738e7f9685865d5298248b7fbd7380749e - https://gist.github.com/librick/eacf19bcfc5ca964e0882b4ef9864bf5
CVE ID: CVE-2022-41436 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:19:51.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in OXHOO TP50 OXH1.50 allows unauthenticated attackers to access the administrative panel via browsing to the URL http://device_ip/index1.html. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NF-Security-Team/CVEs/blob/main/CVE-OXHOO/Readme.md
CVE ID: CVE-2022-41437 State: PUBLISHED Published: 2022-09-30T14:04:21.000Z Last Updated: 2025-05-20T19:18:41.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billing System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/createProduct.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chi645190147/bug_report/blob/main/vendors/mayuri_k/billing-system-project/RCE-1.md
CVE ID: CVE-2022-41439 State: PUBLISHED Published: 2022-09-30T14:04:22.000Z Last Updated: 2025-05-20T19:16:45.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chi645190147/bug_report/blob/main/vendors/mayuri_k/billing-system-project/SQLi-2.md
CVE ID: CVE-2022-41440 State: PUBLISHED Published: 2022-09-30T14:04:23.000Z Last Updated: 2025-05-20T19:15:10.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chi645190147/bug_report/blob/main/vendors/mayuri_k/billing-system-project/SQLi-1.md
CVE ID: CVE-2022-41441 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-02T16:05:03.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://reqlogic.com - https://reqlogic.com/ - https://okankurtulus.com.tr/2023/01/17/reqlogic-v11-3-unauthenticated-reflected-cross-site-scripting-xss/ - http://packetstormsecurity.com/files/171557/ReQlogic-11.3-Cross-Site-Scripting
ted-reflected-cross-site-scripting-xss/ - http://packetstormsecurity.com/files/171557/ReQlogic-11.3-Cross-Site-Scripting.html
CVE ID: CVE-2022-41442 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:42:46.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiebruce/PicUploader/issues/80 - https://github.com/xiebruce/PicUploader/commit/2b0411bddb7942e0ace136a82d4ccde0fe66f263
CVE ID: CVE-2022-41443 State: PUBLISHED Published: 2022-10-03T15:31:47 Last Updated: 2024-08-03T12:42:46.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/enferas/7acd9636cc221bbf61d51425ab91ef01
CVE ID: CVE-2022-41444 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-11-04T16:09:55.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/9079535112e4f4ff2c1d2ce1c099d4c2
CVE ID: CVE-2022-41445 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T15:03:51.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Subject page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/teachers-record-management-system-using-codeigniter/ - https://drive.google.com/file/d/18OjJQA2-8-Hdt0HTMwp4aL_Mp_WuffvL/view?usp=sharing - https://ihexcoder.wixsite.com/secresearch/post/cve-2022-41445-cr
/d/18OjJQA2-8-Hdt0HTMwp4aL_Mp_WuffvL/view?usp=sharing - https://ihexcoder.wixsite.com/secresearch/post/cve-2022-41445-cross-site-scripting-in-teachers-record-management-system-using-codeignitor - https://github.com/RashidKhanPathan/CVE-2022-41445
CVE ID: CVE-2022-41446 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T18:47:03.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to access and modify user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/teachers-record-management-system-using-codeigniter/ - https://drive.google.com/file/d/1Rre498CWp9pWyW9h5ran8GkW6TA2NztC/view?usp=sharing - https://ihexcoder.wixsite.com/secresearch/post/privilege-escalation-in-teachers-record-management-system-using-codeignitor -
://ihexcoder.wixsite.com/secresearch/post/privilege-escalation-in-teachers-record-management-system-using-codeignitor - https://github.com/RashidKhanPathan/CVE-2022-41446