Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31256 State: PUBLISHED Published: 2022-10-26T08:55:09.458Z Last Updated: 2025-05-09T19:11:55.650Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: SUSE Products: openSUSE Factory Problem Types: CWE-59 Description: A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1204696
CVE ID: CVE-2022-31257 State: PUBLISHED Published: 2022-07-12T10:06:43 Last Updated: 2024-08-03T07:11:39.898Z Vendors: Siemens Products: Mendix Applications using Mendix 7, Mendix Applications using Mendix 8, Mendix Applications using Mendix 9, Mendix Applications using Mendix 9 (V9.12), Mendix Applications using Mendix 9 (V9.6) Problem Types: CWE-284 Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.14.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.2), Mendix Applications using Mendix 9 (V9.6
V9.14.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.2), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). In case of access to an active user session in an application that is built with an affected version, it’s possible to change that user’s password bypassing password validations within a Mendix application. This could allow to set weak passwords. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-433782.pdf
CVE ID: CVE-2022-31258 State: PUBLISHED Published: 2022-05-20T22:02:46 Last Updated: 2024-08-03T07:11:39.847Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink. Additional Analyst Notes: - CVE Program Container: References: - https://checkmk.com/werk/13902 - https://forum.checkmk.com/c/announcements/18
CVE ID: CVE-2022-31259 State: PUBLISHED Published: 2022-05-21T00:00:00 Last Updated: 2024-08-03T07:11:39.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control. When a /p1/p2/:name route is configured, attackers can access it by appending .xml in various places (e.g., p1.xml instead of p1). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/beego/beego/issues/4946 - https://beego.vip - https://github.com/beego/beego/tree/v2.0.2 - https://github.com/advisories/GHSA-qx32-f6g6-fcfr
CVE ID: CVE-2022-31260 State: PUBLISHED Published: 2022-07-17T19:57:00 Last Updated: 2024-08-03T07:11:39.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value. Additional Analyst Notes: - CVE Program Container: References: - https://www.resourcespace.com - https://github.com/grymer/CVE/blob/master/CVE-2022-31260.md
CVE ID: CVE-2022-31261 State: PUBLISHED Published: 2022-05-24T14:49:47 Last Updated: 2024-08-03T07:11:39.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue was discovered in Morpheus through 5.2.16 and 5.4.x through 5.4.4. A successful attack requires a SAML identity provider to be configured. In order to exploit the vulnerability, the attacker must know the unique SAML callback ID of the configured identity source. A remote attacker can send a request crafted with an XXE payload to invoke a malicious DTD hosted on a system that they control. This results in reading local files that the application has access to. Additional Analyst Notes: - CVE Program Container: Re
results in reading local files that the application has access to. Additional Analyst Notes: - CVE Program Container: References: - https://support.morpheusdata.com/s/?language=en_US - https://docs.morpheusdata.com/en/5.4.4/release_notes/current.html
CVE ID: CVE-2022-31262 State: PUBLISHED Published: 2022-08-17T14:37:42 Last Updated: 2024-08-03T07:11:39.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://secure77.de/category/subjects/researches/ - https://secure77.de/gog-galaxy-cve-2022-31262/ - https://github.com/secure-77/CVE-2022-31262 - https://www.yo
earches/ - https://secure77.de/gog-galaxy-cve-2022-31262/ - https://github.com/secure-77/CVE-2022-31262 - https://www.youtube.com/watch?v=Bgdbx5TJShI
CVE ID: CVE-2022-31263 State: PUBLISHED Published: 2022-05-24T03:48:25 Last Updated: 2024-08-03T07:11:39.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mastodon/mastodon/pull/17909 - https://github.com/mastodon/mastodon/releases/tag/v3.5.0
CVE ID: CVE-2022-31264 State: PUBLISHED Published: 2022-05-21T20:04:50 Last Updated: 2024-08-03T07:11:39.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ainevsia/CVE-Request/tree/main/Solana/1 - https://github.com/solana-labs/rbpf/releases/tag/v0.2.29
CVE ID: CVE-2022-31265 State: PUBLISHED Published: 2022-05-26T17:12:50 Last Updated: 2024-08-03T07:11:39.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The replay feature in the client in Wargaming World of Warships 0.11.4 allows remote attackers to execute code when a user launches a replay from an untrusted source. Additional Analyst Notes: - CVE Program Container: References: - https://imgur.com/a/cm5E0jb
CVE ID: CVE-2022-31266 State: PUBLISHED Published: 2022-06-29T00:46:29 Last Updated: 2024-08-03T07:11:39.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts. Additional Analyst Notes: - CVE Program Container: References: - https://www.bcksec.com/services/ - https://medium.com/%40bcksec/in-ilias-through-7-10-620c0de685ee
CVE ID: CVE-2022-31267 State: PUBLISHED Published: 2022-05-21T20:35:31 Last Updated: 2024-08-03T07:11:39.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext 'attacker@example.com\n\trole = "#admin"' value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gitblit/gitblit/issues/1410 - https://github.com/gitblit/gitblit/releases/tag/v1.9.3
CVE ID: CVE-2022-31268 State: PUBLISHED Published: 2022-05-21T20:35:09 Last Updated: 2024-08-03T07:11:39.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/metaStor/Vuls/blob/main/gitblit/gitblit%20V1.9.3%20path%20traversal/gitblit%20V1.9.3%20path%20traversal.md
CVE ID: CVE-2022-31269 State: PUBLISHED Published: 2022-08-25T21:59:52 Last Updated: 2024-08-03T07:11:39.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.) Additional Analyst Notes: - CVE Program Container: References: - https://eg.linkedin.com/in/omar-1-hashem - https://www.nortekcontrol.com/access-control/ - http://packetstormsecurity.com/files/167990/Nortek-Linear-eMerge-E3-Series-Credential-Disclosure.html - https://gist.github.com/omarhashem12
curity.com/files/167990/Nortek-Linear-eMerge-E3-Series-Credential-Disclosure.html - https://gist.github.com/omarhashem123/71ec9223e90ea76a76096d777d9b945c
CVE ID: CVE-2022-31273 State: PUBLISHED Published: 2022-06-14T12:15:41 Last Updated: 2024-08-03T07:11:39.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted session_id cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhhua/issus/blob/main/1.pdf
CVE ID: CVE-2022-31277 State: PUBLISHED Published: 2022-06-16T14:53:20 Last Updated: 2024-08-03T07:11:39.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/skyedai910/Vuln/tree/master/xiaomi_lamp_1/replay_attack_0
CVE ID: CVE-2022-31279 State: REJECTED Published: 2022-06-07T15:53:33 Last Updated: 2022-08-12T15:15:40 Description: No description available.
CVE ID: CVE-2022-31282 State: PUBLISHED Published: 2022-06-10T17:21:01 Last Updated: 2024-08-03T07:11:39.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/708
CVE ID: CVE-2022-31285 State: PUBLISHED Published: 2022-06-10T17:21:02 Last Updated: 2024-08-03T07:11:39.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/702
CVE ID: CVE-2022-31287 State: PUBLISHED Published: 2022-06-10T17:21:04 Last Updated: 2024-08-03T07:11:40.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/703
CVE ID: CVE-2022-31289 State: REJECTED Published: 2022-06-14T16:44:59 Last Updated: 2022-06-24T14:41:30 Description: No description available.
CVE ID: CVE-2022-31290 State: PUBLISHED Published: 2022-07-08T11:10:34 Last Updated: 2024-08-03T07:11:39.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idno/known - https://withknown.com/ - http://docs.withknown.com/en/latest/install/index.html - https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/
CVE ID: CVE-2022-31291 State: PUBLISHED Published: 2022-06-16T00:00:00 Last Updated: 2024-08-03T07:11:39.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/COVESA/dlt-daemon/pull/376/commits - https://lists.debian.org/debian-lts-announce/2022/12/msg00016.html
CVE ID: CVE-2022-31294 State: PUBLISHED Published: 2022-06-16T17:46:23 Last Updated: 2024-08-03T07:11:40.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15337/online-discussion-forum-site-phpoop-free-source-code.html - https://github.com/bigzooooz/CVE-2022-31294
CVE ID: CVE-2022-31295 State: PUBLISHED Published: 2022-06-16T19:13:57 Last Updated: 2024-08-03T07:11:39.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15337/online-discussion-forum-site-phpoop-free-source-code.html - https://github.com/bigzooooz/CVE-2022-31295
CVE ID: CVE-2022-31296 State: PUBLISHED Published: 2022-06-17T12:22:19 Last Updated: 2024-08-03T07:11:39.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15337/online-discussion-forum-site-phpoop-free-source-code.html - https://github.com/bigzooooz/CVE-2022-31296
CVE ID: CVE-2022-31298 State: PUBLISHED Published: 2022-06-16T16:55:16 Last Updated: 2024-08-03T07:11:40.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://angtech.org/product/view/3 - https://angtech.org - https://github.com/bigzooooz/CVE-2022-31298
CVE ID: CVE-2022-31299 State: PUBLISHED Published: 2022-06-16T21:22:59 Last Updated: 2024-08-03T07:11:39.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form. Additional Analyst Notes: - CVE Program Container: References: - https://angtech.org/product/view/3 - https://angtech.org - https://github.com/bigzooooz/CVE-2022-31299
CVE ID: CVE-2022-31300 State: PUBLISHED Published: 2022-06-16T14:24:28 Last Updated: 2024-08-03T07:11:39.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://angtech.org/product/view/3 - https://angtech.org - https://github.com/bigzooooz/CVE-2022-31300
CVE ID: CVE-2022-31301 State: PUBLISHED Published: 2022-06-16T17:14:06 Last Updated: 2024-08-03T07:11:39.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component. Additional Analyst Notes: - CVE Program Container: References: - https://angtech.org/product/view/3 - https://angtech.org - https://github.com/bigzooooz/CVE-2022-31301
CVE ID: CVE-2022-31302 State: PUBLISHED Published: 2022-06-21T12:51:38 Last Updated: 2024-08-03T07:11:39.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maccmspro/maccms8/issues/1
CVE ID: CVE-2022-31303 State: PUBLISHED Published: 2022-06-21T12:51:39 Last Updated: 2024-08-03T07:11:39.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maccmspro/maccms10/issues/20
CVE ID: CVE-2022-31306 State: PUBLISHED Published: 2022-06-21T12:57:30 Last Updated: 2024-08-03T07:19:05.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_convert_to_slow_array at src/njs_array.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/481 - https://github.com/nginx/njs/commit/81af26364c21c196dd21fb5e14c7fa9ce7debd17
CVE ID: CVE-2022-31307 State: PUBLISHED Published: 2022-06-21T12:57:31 Last Updated: 2024-08-03T07:19:05.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_string_offset at src/njs_string.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/482 - https://github.com/nginx/njs/commit/eafe4c7a326b163612f10861392622b5da5b1792
CVE ID: CVE-2022-31308 State: PUBLISHED Published: 2022-06-14T13:09:53 Last Updated: 2024-08-03T07:19:05.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution of the exec cmd function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20AC1200.md
CVE ID: CVE-2022-31309 State: PUBLISHED Published: 2022-06-14T13:09:53 Last Updated: 2024-08-03T07:19:05.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via execution of the exec cmd function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20AC1200_check_live.md
CVE ID: CVE-2022-31311 State: PUBLISHED Published: 2022-06-14T13:09:54 Last Updated: 2024-08-03T07:19:05.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pghuanghui/CVE_Request/blob/main/AERIAL%20X%201200_Command%20Execution%20Vulnerability.md
CVE ID: CVE-2022-31313 State: PUBLISHED Published: 2022-06-08T19:13:13 Last Updated: 2024-08-03T07:19:05.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/api-res-py/ - https://github.com/rakeshrkz7/as_api_res/issues/1
CVE ID: CVE-2022-31321 State: PUBLISHED Published: 2022-08-01T19:24:32 Last Updated: 2024-08-03T07:19:05.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: References: - http://bolt.com - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md
CVE ID: CVE-2022-31322 State: PUBLISHED Published: 2022-09-13T22:00:36 Last Updated: 2024-08-03T07:19:05.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentasecurity.com/product/wapples/ - https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb
CVE ID: CVE-2022-31324 State: PUBLISHED Published: 2022-09-13T22:00:31 Last Updated: 2024-08-03T07:19:05.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentasecurity.com/product/wapples/ - https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb
CVE ID: CVE-2022-31325 State: PUBLISHED Published: 2022-06-08T15:52:40 Last Updated: 2024-08-03T07:19:05.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ChurchCRM/CRM/issues/6005 - https://www.nu11secur1ty.com/2022/06/cve-2022-31325.htm - https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325 - http://packetstormsecurity.com/files/167483/ChurchCRM-4.4.5-SQL-Injection.html
CVE ID: CVE-2022-31327 State: PUBLISHED Published: 2022-05-31T15:24:31 Last Updated: 2024-08-03T07:19:05.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-1.md
CVE ID: CVE-2022-31328 State: PUBLISHED Published: 2022-05-31T15:26:25 Last Updated: 2024-08-03T07:19:05.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-5.md
CVE ID: CVE-2022-31329 State: PUBLISHED Published: 2022-05-31T15:27:56 Last Updated: 2024-08-03T07:19:05.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-8.md
CVE ID: CVE-2022-31335 State: PUBLISHED Published: 2022-05-31T14:58:02 Last Updated: 2024-08-03T07:19:05.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-6.md
CVE ID: CVE-2022-31336 State: PUBLISHED Published: 2022-05-31T14:56:19 Last Updated: 2024-08-03T07:19:05.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-7.md