Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.9 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/67 - https://vuldb.com/?id.97335
CVE ID: CVE-2017-20104 State: PUBLISHED Published: 2022-06-28T06:40:18.000Z Last Updated: 2025-04-15T14:11:39.108Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Simplessus Problem Types: CWE-89 Description: A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWA_SID leads to sql injection (Time). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component.
be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/bugtraq/2017/Feb/39 - https://vuldb.com/?id.97252
CVE ID: CVE-2017-20105 State: PUBLISHED Published: 2022-06-28T06:40:22.000Z Last Updated: 2025-04-15T14:11:28.707Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: unspecified Products: Simplessus Problem Types: CWE-22 Description: A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument path with the input ..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to addr
iated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/bugtraq/2017/Feb/40 - https://vuldb.com/?id.97253
CVE ID: CVE-2017-20106 State: PUBLISHED Published: 2022-06-28T06:40:29.000Z Last Updated: 2025-04-15T14:11:17.965Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Lithium Products: Forum Problem Types: CWE-918 Description: A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument upload_url leads to server-side request forgery. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vulnerability-lab.com/get_content.php?id=2030 - https://vuldb.com/?id.97265
CVE ID: CVE-2017-20107 State: PUBLISHED Published: 2022-06-28T06:40:32.000Z Last Updated: 2025-04-15T14:11:03.761Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ShadeYouVPN.com Products: Client Problem Types: CWE-269 Description: A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The manipulation leads to improper privilege management. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1.12 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst
version 2.0.1.12 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/28 - https://vuldb.com/?id.97122
CVE ID: CVE-2017-20108 State: PUBLISHED Published: 2022-06-29T06:55:20.000Z Last Updated: 2025-04-15T14:10:52.135Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Easy Table Plugin Problem Types: CWE-80 Description: A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "><script>alert(1)</script> leads to basic cross site scripting. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclos
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/24 - https://vuldb.com/?id.97119
CVE ID: CVE-2017-20109 State: PUBLISHED Published: 2022-06-29T06:55:26.000Z Last Updated: 2025-04-15T14:10:43.982Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Teleopti Products: WFM Problem Types: CWE-200 Description: A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant of the component Administration. The manipulation leads to information disclosure (Credentials). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. A
y. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/13 - https://vuldb.com/?id.96805
CVE ID: CVE-2017-20110 State: PUBLISHED Published: 2022-06-29T06:55:31.000Z Last Updated: 2025-04-15T14:10:36.857Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Teleopti Products: WFM Problem Types: CWE-200 Description: A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure (Credentials). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: -
sclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/13 - https://vuldb.com/?id.96806
CVE ID: CVE-2017-20111 State: PUBLISHED Published: 2022-06-29T06:55:38.000Z Last Updated: 2025-04-15T14:10:23.107Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Teleopti Products: WFM Problem Types: CWE-269 Description: A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the component Administration. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
nded to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/13 - https://vuldb.com/?id.96807
CVE ID: CVE-2017-20112 State: PUBLISHED Published: 2022-06-29T06:55:42.000Z Last Updated: 2025-04-15T14:10:12.158Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IVPN Products: Client Problem Types: CWE-269 Description: A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument --up cmd leads to improper privilege management. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.6.2 is able to address this issue. It is recommended to upgrade the affected component.
be used. Upgrading to version 2.6.2 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/14 - https://github.com/kacperszurek/exploits/blob/master/IVPN/ivpn_privilege_escalation.py - https://vuldb.com/?id.96655
CVE ID: CVE-2017-20113 State: PUBLISHED Published: 2022-06-29T16:15:24.000Z Last Updated: 2025-04-15T14:10:05.044Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: TrueConf Products: Server Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com
Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com/?id.96627
CVE ID: CVE-2017-20114 State: PUBLISHED Published: 2022-06-29T16:15:26.000Z Last Updated: 2025-04-15T14:09:57.040Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: TrueConf Products: Server Problem Types: CWE-80 Description: A vulnerability has been found in TrueConf Server 4.3.7 and classified as problematic. This vulnerability affects unknown code of the file /admin/conferences/get-all-status/. The manipulation of the argument keys[] leads to basic cross site scripting (Reflected). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
sclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com/?id.96628
CVE ID: CVE-2017-20115 State: PUBLISHED Published: 2022-06-29T16:15:27.000Z Last Updated: 2025-04-15T14:09:48.913Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: TrueConf Products: Server Problem Types: CWE-80 Description: A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /admin/conferences/list/. The manipulation of the argument sort leads to basic cross site scripting (Reflected). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com/?id.96629
CVE ID: CVE-2017-20116 State: PUBLISHED Published: 2022-06-29T16:15:29.000Z Last Updated: 2025-04-15T14:09:41.785Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: TrueConf Products: Server Problem Types: CWE-80 Description: A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown function of the file /admin/group/list/. The manipulation of the argument checked_group_id leads to basic cross site scripting (Reflected). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
losed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com/?id.96630
CVE ID: CVE-2017-20117 State: PUBLISHED Published: 2022-06-29T16:15:30.000Z Last Updated: 2025-04-15T14:09:32.764Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: TrueConf Products: Server Problem Types: CWE-80 Description: A vulnerability was found in TrueConf Server 4.3.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/group. The manipulation leads to basic cross site scripting (DOM). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db
e used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com/?id.96631
CVE ID: CVE-2017-20118 State: PUBLISHED Published: 2022-06-29T16:15:31.000Z Last Updated: 2025-04-15T14:09:20.898Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: TrueConf Products: Server Problem Types: CWE-80 Description: A vulnerability was found in TrueConf Server 4.3.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/conferences/list/. The manipulation of the argument domxss leads to basic cross site scripting (DOM). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
ed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com/?id.96632
CVE ID: CVE-2017-20119 State: PUBLISHED Published: 2022-06-29T16:15:33.000Z Last Updated: 2025-04-15T14:09:09.413Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: TrueConf Products: Server Problem Types: CWE-601 Description: A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The manipulation of the argument redirect_url leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db
e used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com/?id.96633
CVE ID: CVE-2017-20120 State: PUBLISHED Published: 2022-06-29T16:15:34.000Z Last Updated: 2025-04-15T14:08:58.187Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: TrueConf Products: Server Problem Types: CWE-352 Description: A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ -
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41184/ - https://vuldb.com/?id.96634
CVE ID: CVE-2017-20121 State: PUBLISHED Published: 2022-06-30T05:05:20.000Z Last Updated: 2025-04-15T14:08:51.896Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Teradici Products: Management Console Problem Types: CWE-269 Description: A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/62 - https://vuldb.com/?id.97279
CVE ID: CVE-2017-20122 State: PUBLISHED Published: 2022-06-30T05:05:22.000Z Last Updated: 2025-04-15T14:08:44.945Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Bitrix Products: Site Manager Problem Types: CWE-80 Description: A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is an unknown functionality of the component Contact Form. The manipulation of the argument text with the input <img src="http://1"; on onerror="$(’p').text(’Hacked’)" /> leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analy
ing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/3 - https://vuldb.com/?id.96643
CVE ID: CVE-2017-20123 State: PUBLISHED Published: 2022-06-30T05:05:23.000Z Last Updated: 2025-04-15T14:08:34.930Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: unspecified Products: Viscosity Problem Types: CWE-426 Description: A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the component DLL Handler. The manipulation leads to untrusted search path. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.8 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes:
ion 1.6.8 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Feb/1 - https://github.com/kacperszurek/exploits/tree/master/Viscosity - https://www.sparklabs.com/blog/viscosity-for-mac-windows-version-1-6-8/ - https://vuldb.com/?id.96639
CVE ID: CVE-2017-20124 State: PUBLISHED Published: 2022-06-30T05:05:25.000Z Last Updated: 2025-04-15T14:08:25.681Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Online Hotel Booking System Pro Plugin Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41182/ - https://vuldb.com/?id.96624
CVE ID: CVE-2017-20125 State: PUBLISHED Published: 2022-06-30T05:05:26.000Z Last Updated: 2025-04-15T14:08:12.593Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Online Hotel Booking System Pro Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
as been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41181/ - https://vuldb.com/?id.96625
CVE ID: CVE-2017-20126 State: PUBLISHED Published: 2022-07-13T17:55:13.000Z Last Updated: 2025-04-14T16:00:49.879Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: KB Affiliate Referral Script Problem Types: CWE-89 Description: A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA A
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41166/ - https://vuldb.com/?id.96621
CVE ID: CVE-2017-20127 State: PUBLISHED Published: 2022-07-13T17:55:18.000Z Last Updated: 2025-04-14T16:00:42.785Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: KB Login Authentication Script Problem Types: CWE-89 Description: A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41167/ - https://vuldb.com/?id.96620
CVE ID: CVE-2017-20128 State: PUBLISHED Published: 2022-07-13T17:55:25.000Z Last Updated: 2025-04-14T16:00:35.899Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: KB Messages PHP Script Problem Types: CWE-89 Description: A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41168/ - https://vuldb.com/?id.96619
CVE ID: CVE-2017-20129 State: PUBLISHED Published: 2022-07-14T06:55:09.000Z Last Updated: 2025-04-15T14:06:53.127Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: LogoStore Problem Types: CWE-89 Description: A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT CONCAT(CONCAT('qqkkq','VnPVWVaYxljWqGpLLbEIyPIHBjjjjASQTnaqfKaV'),'qvvpq'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- oCrh&search= leads to sql injection. It is possible to launch the attack remote