Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-28392 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-27T20:16:24.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker to escalate privileges via the pscartabandonmentproFrontCAPUnsubscribeJobModuleFrontController::setEmailVisualized() method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/en/remarketing-shopping-cart-abandonment/16535-abandoned-cart-reminder-pro.html - https://security.friendsofpresta.org/modules/2024/03/14/pscartabandonmentpro.html
CVE ID: CVE-2024-28393 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-08-27T20:06:57.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess() method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/fr/paiement-en-plusieurs-fois/87023-scalapay-payez-en-3-fois-sans-frais.html - https://security.friendsofpresta.org/modules/2024/03/19/scalapay.html
CVE ID: CVE-2024-28394 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-10-28T18:58:51.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/en/customer-administration/28379-sales-reports-statistics-custom-fields-export.html - https://security.friendsofpresta.org/modules/2024/03/14/reportsstatistics.html
CVE ID: CVE-2024-28395 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-02T00:56:57.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Best-Kit bestkit_popup v.1.7.2 and before allows a remote attacker to escalate privileges via the bestkit_popup.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://addons.prestashop.com/en/pop-up/20208-pop-up-schedule-popup-splash-window.html - https://security.friendsofpresta.org/modules/2024/03/14/bestkit_popup.html
CVE ID: CVE-2024-28396 State: PUBLISHED Published: 2024-03-20T00:00:00 Last Updated: 2024-08-28T20:21:22.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the download.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/en/data-import-export/17596-orders-csv-excel-export-pro.html - https://security.friendsofpresta.org/modules/2024/03/14/ordersexport.html
CVE ID: CVE-2024-28397 State: PUBLISHED Published: 2024-06-20T00:00:00 Last Updated: 2024-08-02T00:56:57.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Marven11 - https://github.com/Marven11/CVE-2024-28397-js2py-Sandbox-Escape
CVE ID: CVE-2024-28401 State: PUBLISHED Published: 2024-03-15T00:00:00.000Z Last Updated: 2025-03-28T18:37:34.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_1_Root_Access_Control/XSS.md
CVE ID: CVE-2024-28402 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-02T00:56:57.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_4_IP_Port_Filtering/XSS.md
CVE ID: CVE-2024-28403 State: PUBLISHED Published: 2024-03-15T00:00:00.000Z Last Updated: 2025-03-27T19:29:24.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_5_VPN/XSS.md
CVE ID: CVE-2024-28404 State: PUBLISHED Published: 2024-03-15T00:00:00 Last Updated: 2024-08-14T19:53:32.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_3_MAC_Filtering/XSS.md
CVE ID: CVE-2024-28405 State: PUBLISHED Published: 2024-03-29T00:00:00 Last Updated: 2024-08-02T00:56:57.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/turabiaslan/semcms/blob/main/README.md - https://github.com/turabiaslan/semcms
CVE ID: CVE-2024-28417 State: PUBLISHED Published: 2024-03-14T00:00:00 Last Updated: 2024-08-02T00:56:57.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/shavchen214/pwn/issues/I94VFH
CVE ID: CVE-2024-28418 State: PUBLISHED Published: 2024-03-14T00:00:00 Last Updated: 2024-08-16T15:46:00.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/shavchen214/pwn/issues/I94VI3
CVE ID: CVE-2024-28421 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-08-05T19:05:21.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/LioTree/003202727a61c0fb3ec3c948ab5e38f9 - https://github.com/cobub/razor/issues/178
CVE ID: CVE-2024-28423 State: PUBLISHED Published: 2024-03-14T00:00:00 Last Updated: 2024-08-27T20:13:27.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted YML file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bayuncao/vul-cve-15
CVE ID: CVE-2024-28424 State: PUBLISHED Published: 2024-03-14T00:00:00.000Z Last Updated: 2025-04-10T20:32:35.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cloudpickle_materializer.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bayuncao/vul-cve-18
CVE ID: CVE-2024-28425 State: PUBLISHED Published: 2024-03-14T00:00:00 Last Updated: 2024-08-29T17:31:14.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bayuncao/vul-cve-17
CVE ID: CVE-2024-28429 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-02T20:18:30.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/archives_do.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/itsqian797/cms/blob/main/2.md
CVE ID: CVE-2024-28430 State: PUBLISHED Published: 2024-03-13T00:00:00.000Z Last Updated: 2025-03-13T14:45:40.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/itsqian797/cms/blob/main/1.md
CVE ID: CVE-2024-28431 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-06T15:21:48.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/itsqian797/cms/blob/main/3.md
CVE ID: CVE-2024-28432 State: PUBLISHED Published: 2024-03-13T00:00:00 Last Updated: 2024-08-05T17:47:02.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/itsqian797/cms/blob/main/4.md
CVE ID: CVE-2024-28434 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-08-28T20:17:26.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/twentyhq/twenty - https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-28434
CVE ID: CVE-2024-28435 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-08-26T15:18:14.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/twentyhq/twenty - https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-28435
CVE ID: CVE-2024-28436 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-11-05T18:14:59.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in D-Link DAP products DAP-2230, DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2590, DAP-2690, DAP-2695, DAP-3520, DAP-3662 allows a remote attacker to execute arbitrary code via the reload parameter in the session_login.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10380 - https://supportannouncement.us.dlink.co
//supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10380 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10382 - https://djallalakira.medium.com/cve-2024-28436-cross-site-scripting-vulnerability-in-d-link-dap-products-3596976cc99f
CVE ID: CVE-2024-28441 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-22T17:55:05.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the messageid parameter of the mail/mailupdate.jsp endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/iamHuFei/HVVault/blob/main/webapp/%E9%AD%94%E6%96%B9%E7%BD%91%E8%A1%A8/magicflu-mailupdate-jsp-fileupload.md
CVE ID: CVE-2024-28442 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-05T16:31:17.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yealink.com/en/product-detail/ip-phone-vp59 - https://medium.com/%40deepsahu1/cve-2024-28442-yealink-ip-phone-webview-escape-leads-to-sensitive-file-disclosure-via-directory-686ef8f80227
CVE ID: CVE-2024-28446 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-29T16:04:12.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_netmask parameter at /apply.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AdamRitz/lbtvul/blob/main/t300mini.md
CVE ID: CVE-2024-28447 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-20T20:40:41.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_ipaddr parameters at /apply.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AdamRitz/lbtvul/blob/main/t300mini.md
CVE ID: CVE-2024-28456 State: PUBLISHED Published: 2024-03-28T00:00:00.000Z Last Updated: 2025-03-27T19:48:19.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Campcodes Online Marriage Registration System v.1.0 allows a remote attacker to execute arbitrary code via the text fields in the marriage registration request form. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.campcodes.com/projects/php/online-marriage-registration-system/ - https://pastebin.com/CYMDR4ss
CVE ID: CVE-2024-28458 State: PUBLISHED Published: 2024-04-11T00:00:00 Last Updated: 2024-09-06T18:52:59.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actioncompiler.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/keepinggg/poc/blob/main/poc_of_swfc
CVE ID: CVE-2024-28515 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-10-31T18:09:38.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/heshi906/CVE-2024-28515 - https://gist.github.com/heshi906/090b647a76981b8aa621e99fd6e1795d
CVE ID: CVE-2024-28519 State: PUBLISHED Published: 2024-05-03T00:00:00.000Z Last Updated: 2025-03-13T14:10:37.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologies Inc eScan Antivirus could allow privilege escalation for low-privileged users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://northwave-cybersecurity.com/vulnerability-notice-escan-antivirus - https://www.escanav.com/en/index.asp
CVE ID: CVE-2024-28520 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-02T00:56:57.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/aknbg1thub/cve/blob/main/upload.md
CVE ID: CVE-2024-28521 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-28T14:28:06.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute arbitrary code and obtain sensitive information via a crafted script to the loginid parameter of the /singlelogin.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aknbg1thub/cve/blob/main/sql.md
CVE ID: CVE-2024-28535 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-08-02T00:56:57.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromAddressNat_mitInterface.md
CVE ID: CVE-2024-28537 State: PUBLISHED Published: 2024-03-18T00:00:00 Last Updated: 2024-10-28T18:59:48.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromNatStaticSetting.md
CVE ID: CVE-2024-28545 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-06T13:59:34.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/setUsbUnload.md
CVE ID: CVE-2024-28547 State: PUBLISHED Published: 2024-03-18T00:00:00 Last Updated: 2024-08-15T16:33:31.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/formSetFirewallCfg.md
CVE ID: CVE-2024-28550 State: PUBLISHED Published: 2024-03-18T00:00:00 Last Updated: 2024-08-02T17:01:50.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/formExpandDlnaFile.md
CVE ID: CVE-2024-28551 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-05T20:04:30.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the ssid parameter of form_fast_setting_wifi_set function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/form_fast_setting_wifi_set.md
CVE ID: CVE-2024-28553 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-08-28T17:53:27.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromAddressNat_entrys.md
CVE ID: CVE-2024-28556 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-02T00:56:57.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xuanluansec/vul/blob/main/vul/1/README.md - https://github.com/xuanluansec/vul/issues/1
CVE ID: CVE-2024-28557 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-21T14:20:24.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuanluansec/vul/blob/main/vul/2/README-SQL-2.md - https://github.com/xuanluansec/vul/issues/2
CVE ID: CVE-2024-28558 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-02T00:56:57.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin/app/web_crud.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xuanluansec/vul/blob/main/vul/sql/sql-3.md - https://github.com/xuanluansec/vul/issues/3#issue-2243633522
CVE ID: CVE-2024-28559 State: PUBLISHED Published: 2024-03-22T00:00:00 Last Updated: 2024-08-02T00:56:57.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.niushop.com/ - https://v5.niuteam.cn - https://gitee.com/niushop-team/niushop_b2c_v5 - https://v5.niuteam.cn/ - https://chiggerlor.substack.com/p/cve-2024-28560-cve-2024-28559