Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-44875 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T20:41:24.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kioware.com/versionhistory.aspx?pid=15 - https://github.com/olnor18/writeup/tree/master/CVE/CVE-2022-44875
CVE ID: CVE-2022-44877 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-10-21T23:15:28.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=kiLfSvc1SYY - https://gist.github.com/numanturle/c1e82c47f4cba24cff214e904c227386 - http://seclists.org/fulldisclosure/2023/Jan/1 - http://packetstormsecurity.com/files/170388/Control-Web-Panel-7-Remote-Code-Exe
seclists.org/fulldisclosure/2023/Jan/1 - http://packetstormsecurity.com/files/170388/Control-Web-Panel-7-Remote-Code-Execution.html - http://packetstormsecurity.com/files/170820/Control-Web-Panel-Unauthenticated-Remote-Command-Execution.html - http://packetstormsecurity.com/files/171725/Control-Web-Panel-7-CWP7-0.9.8.1147-Remote-Code-Execution.html
CVE ID: CVE-2022-44897 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T15:11:31.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show_number parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://apollotheme.com - https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-44897/poc.txt
CVE ID: CVE-2022-44898 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T13:52:47.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allowing attackers to trigger a memory corruption and cause a Denial of Service (DoS) or escalate privileges via crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://heegong.github.io/posts/ASUS-AuraSync-Kernel-Stack-Based-Buffer-Overflow-Local-Privilege-Escalation/ - https://www.asus.com/campaign/aura
/posts/ASUS-AuraSync-Kernel-Stack-Based-Buffer-Overflow-Local-Privilege-Escalation/ - https://www.asus.com/campaign/aura/us/download.php - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - http://packetstormsecurity.com/files/174447/MsIo64-LOLDriver-Memory-Corruption.html
CVE ID: CVE-2022-44900 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T14:32:21.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/miurahr/py7zr/commit/1bb43f17515c7f69673a1c88ab9cc72a7bbef406 - http://packetstormsecurity.com/files/170127/py7zr-0.20.0-Directory-Traversal.html - https://lessonsec.com/cve/cve-2022-44900/
CVE ID: CVE-2022-44910 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T02:36:41.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yangfar/CVE/blob/main/Reference%20of%20Binbloom.md
CVE ID: CVE-2022-44928 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:26:54.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44928
CVE ID: CVE-2022-44929 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:22:45.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44929
CVE ID: CVE-2022-44930 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:16:39.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DHP-W310AV 3.10EU was discovered to contain a command injection vulnerability via the System Checks function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44930
CVE ID: CVE-2022-44931 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:11:13.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/A18/formWifiBasicSet/readme.md
CVE ID: CVE-2022-44932 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:10:40.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/A18/TendaTelnet/readme.md
CVE ID: CVE-2022-44937 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-25T15:19:17.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/5497lvren/Zhenhao/issues/1
CVE ID: CVE-2022-44938 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:09:15.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pwnit.io/2022/11/23/weak-password-reset-token-leads-to-account-takeover-in-seeddms/
CVE ID: CVE-2022-44939 State: PUBLISHED Published: 2023-01-06T00:00:00.000Z Last Updated: 2025-04-09T20:35:14.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RashidKhanPathan/WindowsPrivilegeEscalation/blob/main/DLL%20Hijacking/CVE-2022-44939/Research.txt
CVE ID: CVE-2022-44940 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:40:42.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NixOS/patchelf/pull/419
CVE ID: CVE-2022-44942 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T13:50:36.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/casdoor/casdoor/issues/1171
CVE ID: CVE-2022-44944 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:15:08.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add Announcement function at /index.php?module=help_pages/pages&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/14
CVE ID: CVE-2022-44945 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:12:06.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the heading_field_id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/16
CVE ID: CVE-2022-44946 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:09:57.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add Page function at /index.php?module=help_pages/pages&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/15
CVE ID: CVE-2022-44947 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:07:20.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Highlight Row feature at /index.php?module=entities/listing_types&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note field after clicking "Add". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/13
CVE ID: CVE-2022-44948 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:04:44.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Entities Group feature at/index.php?module=entities/entities_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field after clicking "Add". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/8
CVE ID: CVE-2022-44949 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:02:23.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field function at /index.php?module=entities/fields&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Short Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/12
CVE ID: CVE-2022-44950 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:00:40.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field function at /index.php?module=entities/fields&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/10
CVE ID: CVE-2022-44951 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:33:00.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Form tab function at /index.php?module=entities/forms&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/11
CVE ID: CVE-2022-44952 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:32:19.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in /index.php?module=configuration/application. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Copyright Text field after clicking "Add". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rukovoditel.com - https://github.com/anhdq201/rukovoditel/issues/9
CVE ID: CVE-2022-44953 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:31:25.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /linkedcontent/listfiles.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field after clicking "Add". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/8
CVE ID: CVE-2022-44954 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:30:28.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /contacts/listcontacts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name field after clicking "Add". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/10
CVE ID: CVE-2022-44955 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:27:42.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the Chat function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Messages field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/5
CVE ID: CVE-2022-44956 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T20:18:27.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /projects/listprojects.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/3
CVE ID: CVE-2022-44957 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T20:17:50.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clients/listclients.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/11
CVE ID: CVE-2022-44959 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T20:17:05.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /meetings/listmeetings.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/6
CVE ID: CVE-2022-44960 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:26:06.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /general/search.php?searchtype=simple. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/4
CVE ID: CVE-2022-44961 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:26:27.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /forums/editforum.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/7
CVE ID: CVE-2022-44962 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T19:26:41.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /calendar/viewcalendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webtareas.com - https://github.com/anhdq201/webtareas/issues/12
CVE ID: CVE-2022-45003 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-25T21:21:27.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gophish/gophish/releases/tag/v0.12.1 - https://pastebin.com/z5MD3z8c
CVE ID: CVE-2022-45004 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-26T16:21:31.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gophish/gophish/releases/tag/v0.12.1 - https://pastebin.com/z5MD3z8c
CVE ID: CVE-2022-45005 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T03:18:33.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/6_ping_cmdi.md
CVE ID: CVE-2022-45008 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T13:48:11.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name field under the Create New module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/realguoxiufeng/bug_report/blob/main/vendors/oretnom23/Online%20Leave%20Management%2
nt: References: - https://github.com/realguoxiufeng/bug_report/blob/main/vendors/oretnom23/Online%20Leave%20Management%20System/XSS-1.md
CVE ID: CVE-2022-45009 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T13:46:28.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/classes/SystemSettings.php?f=update_settings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/realguoxiufeng/bug_report/blob/main/vendors/oretnom23/Online%20Leave%20Management%20System/UPLOAD.md
CVE ID: CVE-2022-45010 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T14:16:48.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/realguoxiufeng/bug_report/blob/main/vendors/bakhtiar/Simple%20Phone%20book_directory%20Web%20App/SQLi-1.md
CVE ID: CVE-2022-45012 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T15:41:09.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Modify Page module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Source field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS - https://github.com/gozan10/cve/issues/1 - https://github.com/gozan10/cve