Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- oCrh&search= leads to sql injection. It is possible to launch the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96540
CVE ID: CVE-2017-20130 State: PUBLISHED Published: 2022-07-16T06:15:25.000Z Last Updated: 2025-04-15T14:05:58.403Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Real Estate Script Problem Types: CWE-89 Description: A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/search_property.php. The manipulation of the argument property_for leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96289 - https://www.exploit-db.com/exploits/41195/
CVE ID: CVE-2017-20131 State: PUBLISHED Published: 2022-07-16T06:15:29.000Z Last Updated: 2025-04-15T14:05:51.748Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: News Portal Problem Types: CWE-89 Description: A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function of the file /news-portal-script/information.php. The manipulation of the argument inf leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vul
c and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96288 - https://www.exploit-db.com/exploits/41194/
CVE ID: CVE-2017-20132 State: PUBLISHED Published: 2022-07-16T06:15:35.000Z Last Updated: 2025-04-15T14:05:43.699Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Multi Vendor Script Problem Types: CWE-89 Description: A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
sclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96287 - https://www.exploit-db.com/exploits/41193/
CVE ID: CVE-2017-20133 State: PUBLISHED Published: 2022-07-16T06:15:42.000Z Last Updated: 2025-04-14T16:00:28.685Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Job Portal Script Problem Types: CWE-287 Description: A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96285
CVE ID: CVE-2017-20134 State: PUBLISHED Published: 2022-07-16T06:15:47.000Z Last Updated: 2025-04-15T14:05:36.548Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Freelancer Script Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96284 - https://www.exploit-db.com/exploits/41191/
CVE ID: CVE-2017-20135 State: PUBLISHED Published: 2022-07-16T06:15:52.000Z Last Updated: 2025-04-15T14:05:28.074Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Dating Script Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Itech Dating Script 3.26. Affected by this vulnerability is an unknown functionality of the file /see_more_details.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com
may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96283 - https://www.exploit-db.com/exploits/41190/
CVE ID: CVE-2017-20136 State: PUBLISHED Published: 2022-07-16T06:15:58.000Z Last Updated: 2025-04-15T14:05:20.830Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Classifieds Script Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Itech Classifieds Script 7.27. Affected is an unknown function of the file /subpage.php. The manipulation of the argument scat with the input =51' AND 4941=4941 AND 'hoCP'='hoCP leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96282 - https://www.exploit-db.com/exploits/41189/
CVE ID: CVE-2017-20137 State: PUBLISHED Published: 2022-07-16T06:16:05.000Z Last Updated: 2025-04-15T14:05:13.481Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: B2B Script Problem Types: CWE-89 Description: A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program
nitiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96281 - https://www.exploit-db.com/exploits/41188/
CVE ID: CVE-2017-20138 State: PUBLISHED Published: 2022-07-16T06:16:11.000Z Last Updated: 2025-04-15T14:05:01.100Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Auction Script Problem Types: CWE-89 Description: A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection (Blind). It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.96261
CVE ID: CVE-2017-20139 State: PUBLISHED Published: 2022-07-22T16:00:21.000Z Last Updated: 2025-04-15T14:03:15.927Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Movie Portal Script Problem Types: CWE-89 Description: A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /show_news.php. The manipulation of the argument id with the input AND (SELECT 1222 FROM(SELECT COUNT(*),CONCAT(0x71786b7a71,(SELECT (ELT(1222=1222,1))),0x717a627871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) leads to sql injection (Erro
2,1))),0x717a627871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) leads to sql injection (Error). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41155/ - https://vuldb.com/?id.96253
CVE ID: CVE-2017-20140 State: PUBLISHED Published: 2022-07-22T16:01:04.000Z Last Updated: 2025-04-15T14:03:06.577Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Itech Products: Movie Portal Script Problem Types: CWE-80 Description: A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input <img src=i onerror=prompt(1)> leads to basic cross site scripting (Reflected). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE
may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41155/ - https://vuldb.com/?id.96254
CVE ID: CVE-2017-20141 State: PUBLISHED Published: 2022-07-22T16:57:38.000Z Last Updated: 2025-04-15T14:02:56.344Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Movie Portal Script Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Itech Movie Portal Script 7.36. This affects an unknown part of the file /movie.php. The manipulation of the argument f leads to sql injection (Union). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.
used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41155/ - https://vuldb.com/?id.96255
CVE ID: CVE-2017-20142 State: PUBLISHED Published: 2022-07-22T16:57:50.000Z Last Updated: 2025-04-15T14:02:44.355Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Movie Portal Script Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Itech Movie Portal Script 7.36. This vulnerability affects unknown code of the file /artist-display.php. The manipulation of the argument act leads to sql injection (Union). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.expl
may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41155/ - https://vuldb.com/?id.96256
CVE ID: CVE-2017-20143 State: PUBLISHED Published: 2022-07-22T16:58:00.000Z Last Updated: 2025-04-15T14:02:34.680Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Itech Products: Movie Portal Script Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects some unknown processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection (Error). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41155/ - https://vuldb.com/?id.96257
CVE ID: CVE-2017-20144 State: PUBLISHED Published: 2022-07-24T19:30:15.000Z Last Updated: 2025-04-15T14:02:26.926Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Anvsoft Products: PDFMate PDF Converter Pro Problem Types: CWE-119 Description: A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vulnerability-lab.com/get_content.php?id=2029 - https://vuldb.com/?id.972
SA ADP Vulnrichment: References: - https://www.vulnerability-lab.com/get_content.php?id=2029 - https://vuldb.com/?id.97267
CVE ID: CVE-2017-20145 State: PUBLISHED Published: 2022-07-25T04:45:13.000Z Last Updated: 2025-04-15T14:02:17.051Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tecrail Products: Responsive Filemanger Problem Types: CWE-22 Description: A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
commended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/19 - https://vuldb.com/?id.96818
CVE ID: CVE-2017-20146 State: PUBLISHED Published: 2022-12-27T21:13:00.461Z Last Updated: 2025-04-11T23:02:21.962Z Vendors: github.com/gorilla/handlers Products: github.com/gorilla/handlers Problem Types: CWE 284: Improper Access Control Description: Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gorilla/handlers/pull/116 - https://github.com/gorilla/handlers/commit/90663712d74cb411cbef281bc1e08c19d1a76145 - https
/gorilla/handlers/pull/116 - https://github.com/gorilla/handlers/commit/90663712d74cb411cbef281bc1e08c19d1a76145 - https://pkg.go.dev/vuln/GO-2020-0020
CVE ID: CVE-2017-20147 State: PUBLISHED Published: 2022-09-20T17:00:51.000Z Last Updated: 2025-05-29T13:35:58.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.gentoo.org/631140 - https://security.gentoo.org/glsa/202209-08
CVE ID: CVE-2017-20148 State: PUBLISHED Published: 2022-09-20T17:01:31.000Z Last Updated: 2025-05-29T13:30:40.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.gentoo.org/630752 - https://security.gentoo.org/glsa/202209-10
CVE ID: CVE-2017-20149 State: PUBLISHED Published: 2022-10-15T00:00:00.000Z Last Updated: 2025-05-14T14:58:01.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on the affected system, as exploited in the wild in mid-2017 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BigNerd95/Chimay-Red - https://www.bleepingcomputer.
ontainer: - CISA ADP Vulnrichment: References: - https://github.com/BigNerd95/Chimay-Red - https://www.bleepingcomputer.com/news/security/hajime-botnet-makes-a-comeback-with-massive-scan-for-mikrotik-routers/
CVE ID: CVE-2017-20150 State: PUBLISHED Published: 2022-12-28T18:31:22.814Z Last Updated: 2024-08-05T21:45:26.029Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: challenge Products: website Problem Types: CWE-89 Description: A vulnerability was found in challenge website. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The name of the patch is f1644b1d3502e5aa5284f31ea80d2623817f4d42. It is recommended to apply a patch to fix this issue. The identifier VDB-216989 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216989
ned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216989 - https://vuldb.com/?ctiid.216989 - https://github.com/Challenge/website/commit/f1644b1d3502e5aa5284f31ea80d2623817f4d42
CVE ID: CVE-2017-20151 State: PUBLISHED Published: 2022-12-30T11:35:05.336Z Last Updated: 2024-08-05T21:45:25.999Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: iText Products: RUPS Problem Types: CWE-611 Description: A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Pr
patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217054 - https://vuldb.com/?ctiid.217054 - https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32
CVE ID: CVE-2017-20152 State: PUBLISHED Published: 2022-12-30T11:42:10.743Z Last Updated: 2024-08-05T21:45:25.997Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: aerouk Products: imageserve Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be use
is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is bd23c784f0e5cb12f66d15c100248449f87d72e2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217056. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217056 - https://vuldb.com/?ctiid.217056 - https://github.com/aerouk/imageserve/pull/27 - https://github.com/aerouk/imageserve/commit/bd23c784f0e5cb12f66d15c100248449f87d72e2
CVE ID: CVE-2017-20153 State: PUBLISHED Published: 2022-12-30T11:44:26.213Z Last Updated: 2024-11-19T19:43:18.922Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: aerouk Products: imageserve Problem Types: CWE-79 Description: A vulnerability has been found in aerouk imageserve and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument REQUEST_URI leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 2ac3cd4f
s to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 2ac3cd4f90b4df66874fab171376ca26868604c4. It is recommended to apply a patch to fix this issue. The identifier VDB-217057 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217057 - https://vuldb.com/?ctiid.217057 - https://github.com/aerouk/imageserve/pull/27 - https://github.com/aerouk/imageserve/commit/2ac3cd4f90b4df66874fab171376ca26868604c4
CVE ID: CVE-2017-20154 State: PUBLISHED Published: 2022-12-30T20:40:32.132Z Last Updated: 2025-04-11T14:47:42.491Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: ghostlander Products: Phoenixcoin Problem Types: CWE-404 Description: A vulnerability was found in ghostlander Phoenixcoin. It has been classified as problematic. Affected is the function CTxMemPool::accept of the file src/main.cpp. The manipulation leads to denial of service. Upgrading to version 0.6.6.1-pxc is able to address this issue. The name of the patch is 987dd68f71a7d8276cef3b6c3d578fd4845b5699. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-
f3b6c3d578fd4845b5699. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217068. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217068 - https://vuldb.com/?ctiid.217068 - https://github.com/ghostlander/Phoenixcoin/commit/987dd68f71a7d8276cef3b6c3d578fd4845b5699 - https://github.com/ghostlander/Phoenixcoin/releases/tag/v0.6.6.1-pxc
CVE ID: CVE-2017-20155 State: PUBLISHED Published: 2022-12-30T21:30:27.953Z Last Updated: 2024-08-05T21:45:25.985Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Sterc Products: Google Analytics Dashboard for MODX Problem Types: CWE-79 Description: A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal Search. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.0.6 is able to address this is
eads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.0.6 is able to address this issue. The identifier of the patch is 855d9560d3782c105568eedf9b22a769fbf29cc0. It is recommended to upgrade the affected component. The identifier VDB-217069 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217069 - https://vuldb.com/?ctiid.217069 - https://github.com/Sterc/Analytics-dashboard-widget/issues/11 - https://github.com/Sterc/Analytics-dashboard-widget/pull/12 - https://github.com/Sterc/Analytics-dashboard-widget/commit/855d9560d3782c105568eedf9b22a769fbf29cc0 - https://github.com/Sterc/Anal
hub.com/Sterc/Analytics-dashboard-widget/commit/855d9560d3782c105568eedf9b22a769fbf29cc0 - https://github.com/Sterc/Analytics-dashboard-widget/milestone/2