Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-29618 State: PUBLISHED Published: 2022-06-14T18:35:37 Last Updated: 2024-08-03T06:26:06.613Z Vendors: SAP SE Products: SAP NetWeaver Development Infrastructure (Design Time Repository) Problem Types: CWE-79 Description: Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to inject script into the URL and execute code in the user’s browser. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: References: - https
confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3197927
CVE ID: CVE-2022-29619 State: PUBLISHED Published: 2022-07-12T20:26:44 Last Updated: 2024-08-03T06:26:06.642Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform Problem Types: CWE-863 Description: Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3169239
CVE ID: CVE-2022-29620 State: PUBLISHED Published: 2022-06-07T20:07:58 Last Updated: 2024-08-03T06:26:06.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/eSlfQQytIq0 - https://whichbuffer.medium.com/filezilla-client-cleartext-storage-of-sensitive-information-in-memory-vulnerability-83958c1e1643 - https://youtu.be/ErZl1i7McHk
CVE ID: CVE-2022-29622 State: PUBLISHED Published: 2022-05-16T00:00:00 Last Updated: 2024-08-03T06:26:06.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrary files is the desired behavior. Also, there are configuration options in all versions that can change the default behavior of how files are handled. Strapi does not consider this to be a valid vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referen
er this to be a valid vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.youtube.com/watch?v=C6QPKooxhAo - https://github.com/node-formidable/formidable/issues/856 - https://github.com/node-formidable/formidable/issues/862 - https://medium.com/%40zsolt.imre/is-cybersecurity-the-next-supply-chain-vulnerability-9a00de745022 - https://github.com/strapi/strapi/issues/20189
CVE ID: CVE-2022-29623 State: PUBLISHED Published: 2022-05-16T13:28:41.000Z Last Updated: 2025-05-20T06:09:26.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=i3xJR-91rrM - https://github.com/expressjs/connect-multiparty/releases/tag/2.2.0 - https://www.npmjs.com/package/connect-multiparty
CVE ID: CVE-2022-29624 State: PUBLISHED Published: 2022-05-31T21:00:07 Last Updated: 2024-08-03T06:26:06.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/happy_source/tpcms - https://gitee.com/happy_source/tpcms/issues/I533KY
CVE ID: CVE-2022-29627 State: PUBLISHED Published: 2022-05-27T20:18:44 Last Updated: 2024-08-03T06:26:06.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsparker1337/OpenSource/blob/main/exploit_idor.md
CVE ID: CVE-2022-29628 State: PUBLISHED Published: 2022-05-27T20:18:43 Last Updated: 2024-08-03T06:26:06.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsparker1337/OpenSource/blob/main/exploit_rxss.md
CVE ID: CVE-2022-29631 State: PUBLISHED Published: 2022-06-06T20:03:03 Last Updated: 2024-08-03T06:26:06.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oblac/jodd/issues/787 - https://github.com/oblac/jodd-http/issues/9
CVE ID: CVE-2022-29632 State: PUBLISHED Published: 2022-05-26T19:55:46 Last Updated: 2024-08-03T06:26:06.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roncoo/roncoo-education/issues/16
CVE ID: CVE-2022-29633 State: PUBLISHED Published: 2022-05-26T19:55:47 Last Updated: 2024-08-03T06:26:06.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/awake1t/linglong
CVE ID: CVE-2022-29637 State: PUBLISHED Published: 2022-05-26T19:55:48 Last Updated: 2024-08-03T06:26:06.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mindoc-org/mindoc/issues/788
CVE ID: CVE-2022-29638 State: PUBLISHED Published: 2022-05-18T11:50:44 Last Updated: 2024-08-03T06:26:06.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/2.md
CVE ID: CVE-2022-29639 State: PUBLISHED Published: 2022-05-18T11:50:44 Last Updated: 2024-08-03T06:26:06.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function uci_cloudupdate_config. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/1.md
CVE ID: CVE-2022-29640 State: PUBLISHED Published: 2022-05-18T11:50:45 Last Updated: 2024-08-03T06:26:06.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/3.md
CVE ID: CVE-2022-29641 State: PUBLISHED Published: 2022-05-18T11:50:47 Last Updated: 2024-08-03T06:26:06.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://totolink.com - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/4.md
CVE ID: CVE-2022-29642 State: PUBLISHED Published: 2022-05-18T11:50:48 Last Updated: 2024-08-03T06:26:06.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/5.md
CVE ID: CVE-2022-29643 State: PUBLISHED Published: 2022-05-18T11:50:49 Last Updated: 2024-08-03T06:26:06.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/6.md
CVE ID: CVE-2022-29644 State: PUBLISHED Published: 2022-05-18T11:50:50 Last Updated: 2024-08-03T06:26:06.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/7.md
CVE ID: CVE-2022-29645 State: PUBLISHED Published: 2022-05-18T11:50:51 Last Updated: 2024-08-03T06:26:06.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/8.md
CVE ID: CVE-2022-29646 State: PUBLISHED Published: 2022-05-18T11:50:52 Last Updated: 2024-08-03T06:26:06.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted web request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/9.md
CVE ID: CVE-2022-29647 State: PUBLISHED Published: 2022-05-31T21:22:01 Last Updated: 2024-08-03T06:26:06.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/aaaahuia/f708c6c8a320e0f3afbb9247903c4670
CVE ID: CVE-2022-29648 State: PUBLISHED Published: 2022-05-31T21:30:07 Last Updated: 2024-08-03T06:26:06.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/34
CVE ID: CVE-2022-29649 State: PUBLISHED Published: 2022-09-15T14:26:50 Last Updated: 2024-08-03T06:26:06.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://qsmart.com - https://gist.github.com/arifseyda/bce00ed14562975d1a96d1d9a0660ec7
CVE ID: CVE-2022-29650 State: PUBLISHED Published: 2022-05-25T12:50:50 Last Updated: 2024-08-03T06:26:06.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/%40d4rkp0w4r/Online_Food_Ordering_System_Unauthenticated_Sql_Injection
CVE ID: CVE-2022-29651 State: PUBLISHED Published: 2022-05-25T12:50:50 Last Updated: 2024-08-03T06:26:06.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/%40d4rkp0w4r/Online_Food_Ordering_System_Remote_Code_Execution
CVE ID: CVE-2022-29652 State: PUBLISHED Published: 2022-05-19T20:40:22 Last Updated: 2024-08-03T06:26:06.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166641/Online-Sports-Complex-Booking-System-1.0-Cross-Site-Scripting.html - https://github.com/playZG/Exploit-/blob/main/Online%20Sports%20Complex%20Booking%20System/Online%20Sports%20Complex%20Booking%20System%201.0%20XSS%20loophole.md
CVE ID: CVE-2022-29653 State: PUBLISHED Published: 2022-05-31T21:41:06 Last Updated: 2024-08-03T06:26:06.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/oufu/ofcms/issues/I53COA
CVE ID: CVE-2022-29654 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:36:33.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nasm.us/pub/nasm/releasebuilds/2.15.05/ - https://gist.github.com/naihsin/b96e2c5c2c81621b46557fd7aacd165f - https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html
CVE ID: CVE-2022-29655 State: PUBLISHED Published: 2022-05-11T12:58:31 Last Updated: 2024-08-03T06:26:06.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/HcH7QdEdRu67yfTJsKKFKA
CVE ID: CVE-2022-29656 State: PUBLISHED Published: 2022-05-11T12:58:33 Last Updated: 2024-08-03T06:26:06.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/package_detail.php. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/g-3G1EGWTYa1hZZTEOh7Tw
CVE ID: CVE-2022-29659 State: PUBLISHED Published: 2022-06-01T17:01:31 Last Updated: 2024-08-03T06:26:06.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14194/responsive-online-blog-website-using-phpmysql.html - https://packetstormsecurity.com/files/158391/responsiveonlineblog10poc-sql.txt - https://www.sourcecodester.com/php/14194/responsive-online-blog-website-using-phpmysql.html.aa
CVE ID: CVE-2022-29660 State: PUBLISHED Published: 2022-05-26T13:27:25 Last Updated: 2024-08-03T06:26:06.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/25#issue-1207649017
CVE ID: CVE-2022-29661 State: PUBLISHED Published: 2022-05-26T13:27:26 Last Updated: 2024-08-03T06:26:06.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/21#issue-1207638326
CVE ID: CVE-2022-29662 State: PUBLISHED Published: 2022-05-26T13:27:27 Last Updated: 2024-08-03T06:26:06.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/17#issue-1207624107
CVE ID: CVE-2022-29663 State: PUBLISHED Published: 2022-05-26T13:27:28 Last Updated: 2024-08-03T06:26:06.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/22#issue-1207641519
CVE ID: CVE-2022-29664 State: PUBLISHED Published: 2022-05-26T13:27:29 Last Updated: 2024-08-03T06:26:06.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/23#issue-1207644525
CVE ID: CVE-2022-29665 State: PUBLISHED Published: 2022-05-26T13:27:30 Last Updated: 2024-08-03T06:26:06.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/19#issue-1207631855
CVE ID: CVE-2022-29666 State: PUBLISHED Published: 2022-05-26T13:27:31 Last Updated: 2024-08-03T06:26:06.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/24#issue-1207646618
CVE ID: CVE-2022-29667 State: PUBLISHED Published: 2022-05-26T13:27:32 Last Updated: 2024-08-03T06:26:06.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/26#issue-1207651726
CVE ID: CVE-2022-29669 State: PUBLISHED Published: 2022-05-26T13:27:35 Last Updated: 2024-08-03T06:26:06.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/20#issue-1207634969
CVE ID: CVE-2022-29670 State: PUBLISHED Published: 2022-05-26T13:27:36 Last Updated: 2024-08-03T06:26:06.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/21#issue-1207638326
CVE ID: CVE-2022-29676 State: PUBLISHED Published: 2022-05-26T13:27:38 Last Updated: 2024-08-03T06:26:06.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/24#issue-1207646618
CVE ID: CVE-2022-29680 State: PUBLISHED Published: 2022-05-26T13:27:41 Last Updated: 2024-08-03T06:26:06.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/31#issue-1209052957
CVE ID: CVE-2022-29681 State: PUBLISHED Published: 2022-05-26T13:27:41 Last Updated: 2024-08-03T06:26:06.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/35#issue-1209058818
CVE ID: CVE-2022-29682 State: PUBLISHED Published: 2022-05-26T13:27:43 Last Updated: 2024-08-03T06:26:06.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/36#issue-1209060196
CVE ID: CVE-2022-29683 State: PUBLISHED Published: 2022-05-26T13:27:43 Last Updated: 2024-08-03T06:26:06.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/34#issue-1209056912