Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ion 14.0.6.25 is able to address this issue. The name of the patch is ffce4882016076acd16fe0f676246905aa3cb2f3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216872. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216872 - https://vuldb.com/?ctiid.216872 - https://github.com/FreePBX/voicemail/commit/ffce4882016076acd16fe0f676246905aa3cb2f3 - https://github.com/FreePBX/voicemail/releases/tag/release%2F14.0.6.25
CVE ID: CVE-2021-4284 State: PUBLISHED Published: 2022-12-27T09:51:38.273Z Last Updated: 2024-08-03T17:23:10.305Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: OpenMRS Products: HTML Form Entry UI Framework Integration Module Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in OpenMRS HTML Form Entry UI Framework Integration Module up to 1.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.0 is able to address this issue. The name of the patch is 811990972ea07649ae33c4b56c61c3b520895f07. It is recommended to upgrade
e to address this issue. The name of the patch is 811990972ea07649ae33c4b56c61c3b520895f07. It is recommended to upgrade the affected component. The identifier VDB-216873 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216873 - https://vuldb.com/?ctiid.216873 - https://github.com/openmrs/openmrs-module-htmlformentryui/pull/51 - https://issues.openmrs.org/browse/RA-1424?filter=-1 - https://github.com/openmrs/openmrs-module-htmlformentryui/commit/811990972ea07649ae33c4b56c61c3b520895f07 - https://github.com/openmrs/openmrs-module-htmlformentryui/releases/tag/2.0.0
CVE ID: CVE-2021-4285 State: PUBLISHED Published: 2022-12-27T10:18:09.550Z Last Updated: 2024-08-03T17:23:10.491Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Nagios Products: NCPA Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Nagios NCPA. This vulnerability affects unknown code of the file agent/listener/templates/tail.html. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to address this issue. The name of the patch is 5abbcd7aa26e0fc815e6b2b0ffe1c15ef3e8fab5. It is recommended to upgrade the affected component. VDB-21687
of the patch is 5abbcd7aa26e0fc815e6b2b0ffe1c15ef3e8fab5. It is recommended to upgrade the affected component. VDB-216874 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216874 - https://vuldb.com/?ctiid.216874 - https://github.com/NagiosEnterprises/ncpa/pull/834 - https://github.com/NagiosEnterprises/ncpa/commit/5abbcd7aa26e0fc815e6b2b0ffe1c15ef3e8fab5 - https://github.com/NagiosEnterprises/ncpa/releases/tag/v2.4.0
CVE ID: CVE-2021-4286 State: PUBLISHED Published: 2022-12-27T10:21:16.703Z Last Updated: 2025-04-11T16:46:27.585Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: cocagne Products: pysrp Problem Types: CWE-203 Description: A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This issue affects the function calculate_x of the file srp/_ctsrp.py. The manipulation leads to information exposure through discrepancy. Upgrading to version 1.0.17 is able to address this issue. The name of the patch is dba52642f5e95d3da7af1780561213ee6053195f. It is recommended to upgrade the affected component. The associated identifier of
2642f5e95d3da7af1780561213ee6053195f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216875. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216875 - https://vuldb.com/?ctiid.216875 - https://github.com/cocagne/pysrp/pull/43 - https://github.com/cocagne/pysrp/commit/dba52642f5e95d3da7af1780561213ee6053195f - https://github.com/cocagne/pysrp/releases/tag/1.0.17
CVE ID: CVE-2021-4287 State: PUBLISHED Published: 2022-12-27T10:32:41.014Z Last Updated: 2025-04-11T14:42:29.162Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: ReFirm Labs Products: binwalk Problem Types: CWE-61 Description: A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the attack remotely. Upgrading to version 2.3.3 is able to address this issue. The name of the patch is fa0c0bd59b8588814756942fe4cb5452e76c1dcd. It
g to version 2.3.3 is able to address this issue. The name of the patch is fa0c0bd59b8588814756942fe4cb5452e76c1dcd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216876. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216876 - https://vuldb.com/?ctiid.216876 - https://github.com/ReFirmLabs/binwalk/pull/556 - https://github.com/ReFirmLabs/binwalk/commit/fa0c0bd59b8588814756942fe4cb5452e76c1dcd - https://github.com/ReFirmLabs/binwalk/releases/tag/v2.3.3
CVE ID: CVE-2021-4288 State: PUBLISHED Published: 2022-12-27T12:16:50.677Z Last Updated: 2024-08-03T17:23:10.422Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: OpenMRS Products: openmrs-module-referenceapplication Problem Types: CWE-79 Description: A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. It has been rated as problematic. This issue affects some unknown processing of the file omod/src/main/webapp/pages/userApp.gsp. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.12.0 is able to address this issue. The name of the patch is 35f81901a4cb925747a9615b8706f507
ly. Upgrading to version 2.12.0 is able to address this issue. The name of the patch is 35f81901a4cb925747a9615b8706f5079d2196a1. It is recommended to upgrade the affected component. The identifier VDB-216881 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216881 - https://vuldb.com/?ctiid.216881 - https://github.com/openmrs/openmrs-module-referenceapplication/pull/92 - https://github.com/openmrs/openmrs-module-referenceapplication/commit/35f81901a4cb925747a9615b8706f5079d2196a1 - https://github.com/openmrs/openmrs-module-referenceapplication/releases/tag/referenceapplication-2.12.0
CVE ID: CVE-2021-4289 State: PUBLISHED Published: 2022-12-27T12:23:46.513Z Last Updated: 2024-08-03T17:23:10.280Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: OpenMRS Products: openmrs-module-referenceapplication Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. Affected by this vulnerability is the function post of the file omod/src/main/java/org/openmrs/module/referenceapplication/page/controller/UserAppPageController.java of the component User App Page. The manipulation of the argument AppId leads to cross site scripting. The attack can be launched remotely.
er App Page. The manipulation of the argument AppId leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.12.0 is able to address this issue. The name of the patch is 0410c091d46eed3c132fe0fcafe5964182659f74. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216883. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.216883 - https://vuldb.com/?ctiid.216883 - https://github.com/openmrs/openmrs-module-referenceapplication/pull/89 - https://issues.openmrs.org/browse/RA-1875 - https://github.com/openmrs/openmrs-module-referenceapplication/com
pull/89 - https://issues.openmrs.org/browse/RA-1875 - https://github.com/openmrs/openmrs-module-referenceapplication/commit/0410c091d46eed3c132fe0fcafe5964182659f74 - https://github.com/openmrs/openmrs-module-referenceapplication/releases/tag/referenceapplication-2.12.0
CVE ID: CVE-2021-4290 State: PUBLISHED Published: 2022-12-27T22:37:48.115Z Last Updated: 2025-04-14T16:24:13.435Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: DHBW Fallstudie Problem Types: CWE-89 Description: A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is 5c13c6a972ef4c07c5f35b417916e0598af9e123. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB
598af9e123. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216907. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216907 - https://vuldb.com/?ctiid.216907 - https://github.com/maboehm/fallstudie/commit/5c13c6a972ef4c07c5f35b417916e0598af9e123
CVE ID: CVE-2021-4291 State: PUBLISHED Published: 2022-12-27T22:54:46.691Z Last Updated: 2024-08-03T17:23:10.497Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: OpenMRS Products: Admin UI Module Problem Types: CWE-79 Description: A vulnerability was found in OpenMRS Admin UI Module up to 1.5.x. It has been declared as problematic. This vulnerability affects unknown code of the file omod/src/main/webapp/pages/metadata/locations/location.gsp. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.6.0 is able to address this issue. The name of the patch is a7eefb5f69f6c50a3bffcb138bb8ea57cb41a9b6. It is recomm
ion 1.6.0 is able to address this issue. The name of the patch is a7eefb5f69f6c50a3bffcb138bb8ea57cb41a9b6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216916. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216916 - https://vuldb.com/?ctiid.216916 - https://github.com/openmrs/openmrs-module-adminui/pull/61 - https://github.com/openmrs/openmrs-module-adminui/commit/a7eefb5f69f6c50a3bffcb138bb8ea57cb41a9b6 - https://github.com/openmrs/openmrs-module-adminui/releases/tag/1.6.0
CVE ID: CVE-2021-4292 State: PUBLISHED Published: 2022-12-27T22:56:47.741Z Last Updated: 2024-11-19T19:46:50.224Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: OpenMRS Products: Admin UI Module Problem Types: CWE-79 Description: A vulnerability was found in OpenMRS Admin UI Module up to 1.4.x. It has been rated as problematic. This issue affects some unknown processing of the file omod/src/main/webapp/pages/metadata/privileges/privilege.gsp of the component Manage Privilege Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.5.0 is able to address this issue. The name of the patch is 4f8565425b7c7
be initiated remotely. Upgrading to version 1.5.0 is able to address this issue. The name of the patch is 4f8565425b7c74128dec9ca46dfbb9a3c1c24911. It is recommended to upgrade the affected component. The identifier VDB-216917 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216917 - https://vuldb.com/?ctiid.216917 - https://github.com/openmrs/openmrs-module-adminui/pull/58 - https://github.com/openmrs/openmrs-module-adminui/commit/4f8565425b7c74128dec9ca46dfbb9a3c1c24911 - https://github.com/openmrs/openmrs-module-adminui/releases/tag/1.5.0
CVE ID: CVE-2021-4293 State: PUBLISHED Published: 2022-12-28T08:53:51.600Z Last Updated: 2024-08-03T17:23:10.338Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: gnuboard Products: youngcart5 Problem Types: CWE-79 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in gnuboard youngcart5 up to 5.4.5.1. Affected is an unknown function of the file adm/menu_list_update.php. The manipulation of the argument me_link leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.4.5.2 is able to address this issue. The name of the patch is 70daa537adfa47b87af12d85f1e698fff01785ff.
ng to version 5.4.5.2 is able to address this issue. The name of the patch is 70daa537adfa47b87af12d85f1e698fff01785ff. It is recommended to upgrade the affected component. VDB-216954 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216954 - https://vuldb.com/?ctiid.216954 - https://github.com/gnuboard/youngcart5/commit/70daa537adfa47b87af12d85f1e698fff01785ff - https://github.com/gnuboard/youngcart5/releases/tag/5.4.5.2
CVE ID: CVE-2021-4294 State: PUBLISHED Published: 2022-12-28T16:51:34.378Z Last Updated: 2024-08-03T17:23:10.323Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenShift Products: OSIN Problem Types: CWE-208 Description: A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The manipulation of the argument secret leads to observable timing discrepancy. The name of the patch is 8612686d6dda34ae9ef6b5a974e4b7accb4fea29. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216987. Additional Analyst Notes: - CVE P
atch to fix this issue. The associated identifier of this vulnerability is VDB-216987. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216987 - https://vuldb.com/?ctiid.216987 - https://github.com/openshift/osin/pull/200 - https://github.com/openshift/osin/commit/8612686d6dda34ae9ef6b5a974e4b7accb4fea29
CVE ID: CVE-2021-4295 State: PUBLISHED Published: 2022-12-29T08:08:58.553Z Last Updated: 2024-08-03T17:23:10.449Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ONC Products: code-validator-api Problem Types: CWE-611 Description: A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. The manipulation leads to xml external entity reference. Upgrading to version 1.0.31 is able to address this issue. The name of the patch i
ads to xml external entity reference. Upgrading to version 1.0.31 is able to address this issue. The name of the patch is fbd8ea121755a2d3d116b13f235bc8b61d8449af. It is recommended to upgrade the affected component. VDB-217018 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217018 - https://vuldb.com/?ctiid.217018 - https://github.com/onc-healthit/code-validator-api/pull/97 - https://github.com/onc-healthit/code-validator-api/commit/fbd8ea121755a2d3d116b13f235bc8b61d8449af - https://github.com/onc-healthit/code-validator-api/releases/tag/1.0.31
CVE ID: CVE-2021-4296 State: PUBLISHED Published: 2022-12-29T08:52:08.121Z Last Updated: 2024-08-03T17:23:10.275Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: w3c Products: Unicorn Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c/unicorn/response/impl/ValidatorNuMessage.java. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 51f75c31f7fc33859a9a571311c67ae4e95d9c68. It is recommended to apply a patch to fix this issue. The associat
he patch is 51f75c31f7fc33859a9a571311c67ae4e95d9c68. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217019. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217019 - https://vuldb.com/?ctiid.217019 - https://github.com/w3c/Unicorn/pull/212 - https://github.com/w3c/Unicorn/commit/51f75c31f7fc33859a9a571311c67ae4e95d9c68
CVE ID: CVE-2021-4297 State: PUBLISHED Published: 2023-01-01T18:15:21.014Z Last Updated: 2025-05-28T13:46:13.502Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: trampgeek Products: jobe Problem Types: Privilege Escalation Description: A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects the function runs_post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness. Upgrading to version 1.6.5 is able to address this issue. The patch is identified as 694da5013dbecc8d30dd83e2a83e78faadf93771. It is recommended to upgrade the a
ress this issue. The patch is identified as 694da5013dbecc8d30dd83e2a83e78faadf93771. It is recommended to upgrade the affected component. VDB-217174 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217174 - https://vuldb.com/?ctiid.217174 - https://github.com/trampgeek/jobe/issues/46 - https://github.com/trampgeek/jobe/commit/694da5013dbecc8d30dd83e2a83e78faadf93771
CVE ID: CVE-2021-4298 State: PUBLISHED Published: 2023-01-02T07:53:29.437Z Last Updated: 2024-11-25T17:52:36.673Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Hesburgh Libraries of Notre Dame Products: Sipity Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Hesburgh Libraries of Notre Dame Sipity. This affects the function SearchCriteriaForWorksParameter of the file app/parameters/sipity/parameters/search_criteria_for_works_parameter.rb. The manipulation leads to sql injection. Upgrading to version 2021.8 is able to address this issue. The patch is named d1704c7363b899ffce65be03a796a0ee5fdbfbdc. It is recommended
ion 2021.8 is able to address this issue. The patch is named d1704c7363b899ffce65be03a796a0ee5fdbfbdc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217179. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217179 - https://vuldb.com/?ctiid.217179 - https://github.com/ndlib/sipity/commit/d1704c7363b899ffce65be03a796a0ee5fdbfbdc - https://github.com/ndlib/sipity/releases/tag/v2021.8
CVE ID: CVE-2021-4299 State: PUBLISHED Published: 2023-01-02T07:57:07.475Z Last Updated: 2024-08-03T17:23:10.350Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: cronvel Products: string-kit Problem Types: CWE-1333 Description: A vulnerability classified as problematic was found in cronvel string-kit up to 0.12.7. This vulnerability affects the function naturalSort of the file lib/naturalSort.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. Upgrading to version 0.12.8 is able to address this issue. The name of the patch is 9cac4c298ee92c1695b0695951f1488884a7ca73. It is recommended to upgrade the
address this issue. The name of the patch is 9cac4c298ee92c1695b0695951f1488884a7ca73. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217180. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217180 - https://vuldb.com/?ctiid.217180 - https://github.com/cronvel/string-kit/commit/9cac4c298ee92c1695b0695951f1488884a7ca73 - https://github.com/cronvel/string-kit/releases/tag/v0.12.8
CVE ID: CVE-2021-4300 State: PUBLISHED Published: 2023-01-04T21:14:42.593Z Last Updated: 2024-08-03T17:23:10.410Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ghostlander Products: Halcyon Problem Types: CWE-284 Description: A vulnerability has been found in ghostlander Halcyon and classified as critical. Affected by this vulnerability is the function CBlock::AddToBlockIndex of the file src/main.cpp of the component Block Verification. The manipulation leads to improper access controls. The attack can be launched remotely. Upgrading to version 1.1.1.0-hal is able to address this issue. The identifier of the patch is 0675b25ae9cc10b5fdc8ea3a32c642979762d45e. It is recommended
able to address this issue. The identifier of the patch is 0675b25ae9cc10b5fdc8ea3a32c642979762d45e. It is recommended to upgrade the affected component. The identifier VDB-217417 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217417 - https://vuldb.com/?ctiid.217417 - https://github.com/ghostlander/Halcyon/commit/0675b25ae9cc10b5fdc8ea3a32c642979762d45e - https://github.com/ghostlander/Halcyon/releases/tag/v1.1.1.0-hal
CVE ID: CVE-2021-4301 State: PUBLISHED Published: 2023-01-07T21:35:11.355Z Last Updated: 2024-08-03T17:23:10.293Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: slackero Products: phpwcms Problem Types: CWE-89 Description: A vulnerability was found in slackero phpwcms up to 1.9.26 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument $phpwcms['db_prepend'] leads to sql injection. The attack may be launched remotely. Upgrading to version 1.9.27 is able to address this issue. The patch is identified as 77dafb6a8cc1015f0777daeb5792f43beef77a9d. It is recommended to upgrade the affected component. VDB-217418 is the identi
77dafb6a8cc1015f0777daeb5792f43beef77a9d. It is recommended to upgrade the affected component. VDB-217418 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217418 - https://vuldb.com/?ctiid.217418 - https://github.com/slackero/phpwcms/commit/77dafb6a8cc1015f0777daeb5792f43beef77a9d - https://github.com/slackero/phpwcms/releases/tag/v1.9.27
CVE ID: CVE-2021-4302 State: PUBLISHED Published: 2023-01-04T21:24:19.710Z Last Updated: 2025-04-10T13:39:52.749Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: slackero Products: phpwcms Problem Types: CWE-79 Description: A vulnerability was found in slackero phpwcms up to 1.9.26. It has been classified as problematic. This affects an unknown part of the component SVG File Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.9.27 is able to address this issue. The patch is named b39db9c7ad3800f319195ff0e26a0981395b1c54. It is recommended to upgrade the affected component. The associated identifier of this
ad3800f319195ff0e26a0981395b1c54. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217419. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217419 - https://vuldb.com/?ctiid.217419 - https://github.com/slackero/phpwcms/commit/b39db9c7ad3800f319195ff0e26a0981395b1c54 - https://github.com/slackero/phpwcms/releases/tag/v1.9.27