Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-27271 State: PUBLISHED Published: 2022-04-10T20:23:59 Last Updated: 2024-08-03T05:25:32.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing
CVE ID: CVE-2022-27272 State: PUBLISHED Published: 2022-04-10T20:23:58 Last Updated: 2024-08-03T05:25:32.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_1791C. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing
CVE ID: CVE-2022-27273 State: PUBLISHED Published: 2022-04-10T20:23:58 Last Updated: 2024-08-03T05:25:32.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12168. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing
CVE ID: CVE-2022-27274 State: PUBLISHED Published: 2022-04-10T20:23:55 Last Updated: 2024-08-03T05:25:32.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12028. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing
CVE ID: CVE-2022-27275 State: PUBLISHED Published: 2022-04-10T20:23:55 Last Updated: 2024-08-03T05:25:32.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_122D0. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing
CVE ID: CVE-2022-27276 State: PUBLISHED Published: 2022-04-10T20:23:54 Last Updated: 2024-08-03T05:25:32.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_10F2C. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing
CVE ID: CVE-2022-27277 State: PUBLISHED Published: 2022-04-10T20:23:54 Last Updated: 2024-08-03T05:25:32.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub_17C08. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28Arbitrary%20File%20Deletion%20and%20Read%29.pdf - https://drive.google.com/drive/folders/1MPtl6pGa7GMIT1-jg69YUGSQdVTfbnay?usp=sharing
CVE ID: CVE-2022-27279 State: PUBLISHED Published: 2022-04-10T20:23:52 Last Updated: 2024-08-03T05:25:32.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub_177E0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28Arbitrary%20File%20Deletion%20and%20Read%29.pdf - https://drive.google.com/drive/folders/1MPtl6pGa7GMIT1-jg69YUGSQdVTfbnay?usp=sharing
CVE ID: CVE-2022-27280 State: PUBLISHED Published: 2022-04-10T20:23:51 Last Updated: 2024-08-03T05:25:32.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the web_exec parameter at /apply.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28XSS%29.pdf
CVE ID: CVE-2022-27286 State: PUBLISHED Published: 2022-04-10T20:23:48 Last Updated: 2024-08-03T05:25:32.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanNonLogin. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27287 State: PUBLISHED Published: 2022-04-10T20:23:47 Last Updated: 2024-08-03T05:25:32.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPPoE. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27288 State: PUBLISHED Published: 2022-04-10T20:23:47 Last Updated: 2024-08-03T05:25:32.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPTP. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27289 State: PUBLISHED Published: 2022-04-10T20:23:46 Last Updated: 2024-08-03T05:25:32.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27290 State: PUBLISHED Published: 2022-04-10T20:23:45 Last Updated: 2024-08-03T05:25:32.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27291 State: PUBLISHED Published: 2022-04-10T20:23:44 Last Updated: 2024-08-03T05:25:32.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the config.save_network_enabled parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27292 State: PUBLISHED Published: 2022-04-10T20:23:44 Last Updated: 2024-08-03T05:25:32.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerability allows attackers to cause a Denial of Service (DoS) via the nextPage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=dir-619
CVE ID: CVE-2022-27293 State: PUBLISHED Published: 2022-04-10T20:23:43 Last Updated: 2024-08-03T05:25:32.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27294 State: PUBLISHED Published: 2022-04-10T20:23:42 Last Updated: 2024-08-03T05:25:32.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27295 State: PUBLISHED Published: 2022-04-10T20:23:41 Last Updated: 2024-08-03T05:25:32.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/wu610777031/IoT_Hunter/blob/main/DIR-619%20Buffer%20Overflow.pdf
CVE ID: CVE-2022-27299 State: PUBLISHED Published: 2022-04-26T13:40:31 Last Updated: 2024-08-03T05:25:32.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kabirkhyrul/HMS/discussions/14
CVE ID: CVE-2022-27304 State: PUBLISHED Published: 2022-04-05T19:03:03 Last Updated: 2024-08-03T05:25:32.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Student-Grading-System
CVE ID: CVE-2022-27305 State: PUBLISHED Published: 2022-05-25T15:37:38 Last Updated: 2024-08-03T05:25:32.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation. Additional Analyst Notes: - CVE Program Container: References: - http://gibbon.com - http://gibbonedu.com - https://github.com/GibbonEdu/core/security/advisories/GHSA-4mq5-8jvh-qq3p
CVE ID: CVE-2022-27306 State: REJECTED Published: 2022-04-01T21:24:11 Last Updated: 2022-04-03T00:12:07 Description: No description available.
CVE ID: CVE-2022-27308 State: PUBLISHED Published: 2022-05-09T17:29:56 Last Updated: 2024-08-03T05:25:32.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a project title. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/robyfofo/PhpSimplyGest - http://phprojekt.altervista.org/phpsimplygest130/ - http://packetstormsecurity.com/files/166966/PHProjekt-PhpSimplyGest-MyProjects-1.3.0-Cross-Site-Scripting.html
CVE ID: CVE-2022-27311 State: PUBLISHED Published: 2022-04-25T12:53:43 Last Updated: 2024-08-03T05:25:32.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/amro/gibbon/pull/321 - https://github.com/amro/gibbon/commit/b2eb99ed304d7491a6d348a5bbdc83a008fc6e0b - https://github.com/amro/gibbon/commit/cade20ca2438cd1b182dad70cbb77fb895779d10
CVE ID: CVE-2022-27313 State: PUBLISHED Published: 2022-05-03T19:57:11 Last Updated: 2024-08-03T05:25:32.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-gitea/gitea/pull/19072
CVE ID: CVE-2022-27330 State: PUBLISHED Published: 2022-05-03T20:01:53 Last Updated: 2024-08-03T05:25:32.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Title text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CP04042K/Full-Ecommece-Website-Add_Product-Stored_XSS-POC
CVE ID: CVE-2022-27331 State: PUBLISHED Published: 2022-04-27T02:47:09 Last Updated: 2024-08-03T05:25:32.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/de/advisories/zaa-2022-02
CVE ID: CVE-2022-27332 State: PUBLISHED Published: 2022-04-27T02:47:10 Last Updated: 2024-08-03T05:25:32.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication. This vulnerability can allow attackers to execute phishing attacks or cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2022-01
CVE ID: CVE-2022-27333 State: PUBLISHED Published: 2022-03-21T21:05:27 Last Updated: 2024-08-03T05:25:32.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cutegod/idcCMS/issues/1
CVE ID: CVE-2022-27336 State: PUBLISHED Published: 2022-04-27T15:17:32 Last Updated: 2024-08-03T05:25:32.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php. Additional Analyst Notes: - CVE Program Container: References: - http://note.youdao.com/noteshare?id=1f5c9012a358f0c4575e1ca57a55fe5e&sub=6C2906C73BB0477FB9DE8601D5495C0A
CVE ID: CVE-2022-27337 State: PUBLISHED Published: 2022-05-05T18:36:34 Last Updated: 2024-08-03T05:25:32.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1230 - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1230#note_1372177 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOTDUXJOKDYO4I7MKHLT5NBGTN5E7FHQ/ - https://www.debian.org/security/2022/dsa-5224 - https:/
ts.fedoraproject.org/message/KOTDUXJOKDYO4I7MKHLT5NBGTN5E7FHQ/ - https://www.debian.org/security/2022/dsa-5224 - https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html
CVE ID: CVE-2022-27340 State: PUBLISHED Published: 2022-04-22T19:51:58 Last Updated: 2024-08-03T05:25:32.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ming-soft/MCMS - https://github.com/UDKI11/vul/blob/main/Mcms%E8%B7%A8%E7%AB%99%E8%AF%B7%E6%B1%82%E4%BC%AA%E9%80%A0.docx
CVE ID: CVE-2022-27341 State: PUBLISHED Published: 2022-04-22T19:51:59 Last Updated: 2024-08-03T05:25:32.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UDKI11/vul/blob/main/JFinalCMS-sqli-2.docx
CVE ID: CVE-2022-27342 State: PUBLISHED Published: 2022-04-22T19:51:59 Last Updated: 2024-08-03T05:25:32.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Link-Admin v0.0.1 was discovered to contain a SQL injection vulnerability via DictRest.ResponseResult(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UDKI11/vul/blob/main/link-admin.docx
CVE ID: CVE-2022-27346 State: PUBLISHED Published: 2022-04-08T08:23:36 Last Updated: 2024-08-03T05:25:32.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/Full-Ecommece-Website-Slides-Unrestricted-File-Upload-RCE-POC - https://drive.google.com/file/d/1SSBY92vfO1Q_Oska6mdpV9vuHmu0BVxk/view?usp=sharing - http://packetstormsecurity.com/files/166654/E-Commerce-Website-1.1.0-Shell-Upload.ht
6mdpV9vuHmu0BVxk/view?usp=sharing - http://packetstormsecurity.com/files/166654/E-Commerce-Website-1.1.0-Shell-Upload.html
CVE ID: CVE-2022-27348 State: PUBLISHED Published: 2022-04-08T08:23:38 Last Updated: 2024-08-03T05:25:32.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Social Codia SMS v1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/sms-Add_Student-Stored_XSS-POC - https://drive.google.com/file/d/1PLRmIi7EBMAXkLMUhUy09PVph1CW6otF/view?usp=sharing - http://packetstormsecurity.com/files/166650/Social-Codia-SMS-1-Cr
d/1PLRmIi7EBMAXkLMUhUy09PVph1CW6otF/view?usp=sharing - http://packetstormsecurity.com/files/166650/Social-Codia-SMS-1-Cross-Site-Scripting.html
CVE ID: CVE-2022-27349 State: PUBLISHED Published: 2022-04-08T08:23:38 Last Updated: 2024-08-03T05:25:32.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/sms-Unrestricted-File-Upload-RCE-POC - https://drive.google.com/file/d/10vgciE0FwkZpzLZf9JSGGyvq3hwehXMs/view?usp=sharing - http://packetstormsecurity.com/files/166655/Social-Codia-SMS-1-Shell-Upload.html
CVE ID: CVE-2022-27351 State: PUBLISHED Published: 2022-04-08T08:23:41 Last Updated: 2024-08-03T05:25:32.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Zoo%20Management%20System%20Upload%20%2B%20RCE/POC.md - https://drive.google.com/file/d/14WEhaUdOaKdwM8Mlztuko4nnQsmoe89O/view?usp=sharing - http://packetstormsecurity.com/files/166651/PHPGurukul-Zoo-Management-S
haUdOaKdwM8Mlztuko4nnQsmoe89O/view?usp=sharing - http://packetstormsecurity.com/files/166651/PHPGurukul-Zoo-Management-System-1.0-Shell-Upload.html
CVE ID: CVE-2022-27352 State: PUBLISHED Published: 2022-04-08T08:23:41 Last Updated: 2024-08-03T05:25:32.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Simple%20House%20Rental%20System%20Upload%20%2B%20RCE/POC.md - https://drive.google.com/file/d/1ZmGyRo9Ah8w3NQF93vsYEj4JQExyVT7Z/view?usp=sharing - http://packetstormsecurity.com/files/166656/Simple-House-Rental-System
GyRo9Ah8w3NQF93vsYEj4JQExyVT7Z/view?usp=sharing - http://packetstormsecurity.com/files/166656/Simple-House-Rental-System-1-Shell-Upload.html
CVE ID: CVE-2022-27357 State: PUBLISHED Published: 2022-04-08T08:23:45 Last Updated: 2024-08-03T05:25:32.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D4rkP0w4r/CVEs/blob/main/Ecommerce%20Website%20Upload%20%2B%20RCE/POC.md - https://drive.google.com/file/d/1m6rovKb3ZWJ-vbsVlfaZDGmyZ_F13nCf/view?usp=sharing - http://packetstormsecurity.com/files/166652/E-Commerce-Website-1.0-Shell-Upload.html