Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3512 State: PUBLISHED Published: 2023-10-04T10:53:36.243Z Last Updated: 2024-09-19T19:23:44.411Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Setelsa Security Products: ConacWin CB Problem Types: CWE-23 Description: Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-setelsa
P Vulnrichment: References: - https://https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-setelsa-security-conacwin
CVE ID: CVE-2023-3513 State: PUBLISHED Published: 2023-07-14T04:49:59.445Z Last Updated: 2024-10-31T15:43:30.777Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Razer Products: Razer Central Problem Types: CWE-269, CWE-502 Description: Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-3513/
CVE ID: CVE-2023-3514 State: PUBLISHED Published: 2023-07-14T04:53:31.771Z Last Updated: 2024-11-05T19:56:27.042Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Razer Products: Razer Central Problem Types: CWE-269 Description: Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/a
le file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-3514/
CVE ID: CVE-2023-3515 State: PUBLISHED Published: 2023-07-05T14:12:33.673Z Last Updated: 2025-02-13T16:55:48.787Z Severity: LOW (CVSS 3 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: go-gitea Products: go-gitea/gitea Problem Types: CWE-601 Description: Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e335cd18-bc4d-4585-adb7-426c817ed053 - https://github.com/go-gitea/gitea/commit/9aaaf980f0ba15611f30568bd67bce3ec12954e2 - https://security.gentoo.org/glsa/202312-13
CVE ID: CVE-2023-3517 State: PUBLISHED Published: 2023-12-12T22:28:08.559Z Last Updated: 2024-08-02T06:55:03.685Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N) Vendors: Hitachi Vantara Products: Pentaho Data Integration & Analytics Problem Types: CWE-99 Description: Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources. Additional Analyst Notes: - CVE Program Container: References: - https://support.pentaho.com/hc/en-us/articles/19668665099533
CVE ID: CVE-2023-3518 State: PUBLISHED Published: 2023-08-09T15:06:52.406Z Last Updated: 2024-10-08T14:56:28.934Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: HashiCorp Products: Consul, Consul Enterprise Problem Types: CWE-266 Description: HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-25-consul-jwt-auth-in-l7-intentions-allow-for-mismatched-service-identity-and-jwt-providers/57004
CVE ID: CVE-2023-3519 State: PUBLISHED Published: 2023-07-19T17:51:39.739Z Last Updated: 2025-10-21T23:05:42.716Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Citrix Products: NetScaler ADC, NetScaler Gateway Problem Types: CWE-94 Description: Unauthenticated remote code execution Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467 - http://packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.html
CVE ID: CVE-2023-3520 State: PUBLISHED Published: 2023-07-06T00:00:20.096Z Last Updated: 2024-10-31T19:44:29.130Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: it-novum Products: it-novum/openitcockpit Problem Types: CWE-614 Description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f3b277bb-91db-419e-bcc4-fe0b055d2551 - https://github.com/it-novum/openitcockpit/commit/6c717f3c352e55257fc3fef2c5dec111f7d2ee6b
CVE ID: CVE-2023-3521 State: PUBLISHED Published: 2023-07-06T01:45:39.229Z Last Updated: 2024-10-31T17:52:07.733Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: fossbilling Products: fossbilling/fossbilling Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/76a3441d-7f75-4a8d-a7a0-95a7f5456eb0 - https://github.com/fossbilling/fossbilling/commit/5eb516d4ebcb764db1b2edf9c8d0539e76ebde52
CVE ID: CVE-2023-3522 State: PUBLISHED Published: 2023-08-08T15:13:35.989Z Last Updated: 2024-10-16T15:02:28.203Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: a2 Products: License Portal System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 License Portal System allows SQL Injection.This issue affects License Portal System: before 1.48. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0445
CVE ID: CVE-2023-3523 State: PUBLISHED Published: 2023-07-06T09:53:48.451Z Last Updated: 2024-11-06T21:49:12.336Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: gpac Products: gpac/gpac Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/57e0be03-8484-415e-8b5c-c1fe4546eaac - https://github.com/gpac/gpac/commit/64201a26476c12a7dbd7ffb5757743af6954db96
CVE ID: CVE-2023-3524 State: PUBLISHED Published: 2023-08-07T14:31:23.140Z Last Updated: 2025-05-05T15:54:41.816Z Vendors: Unknown Products: WPCode Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/89570379-769b-4684-b8a7-28c37b408e5d
CVE ID: CVE-2023-3525 State: PUBLISHED Published: 2023-07-12T04:38:43.519Z Last Updated: 2025-02-05T19:41:35.254Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: wanderlustcodes Products: Getnet Argentina para Woocommerce Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without payment. Additional Analyst Notes: - CVE Program Container: - CISA A
s to set their payment status to 'APPROVED' without payment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/245e9117-ca63-458e-a094-60a759f5ec19?source=cve - https://www.youtube.com/watch?v=xTyWqh93AM0
CVE ID: CVE-2023-3526 State: PUBLISHED Published: 2023-08-08T06:56:05.827Z Last Updated: 2025-02-27T21:10:47.251Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: CLOUD CLIENT 1101T-TX/TX, TC CLOUD CLIENT 1002-4G, TC CLOUD CLIENT 1002-4G ATT, TC CLOUD CLIENT 1002-4G VZW, TC ROUTER 3002T-4G, TC ROUTER 3002T-4G ATT, TC ROUTER 3002T-4G VZW Problem Types: CWE-79 Description: In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code i
ated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-017 - http://seclists.org/fulldisclosure/2023/Aug/12 - http://packetstormsecurity.com/files/174152/Phoenix-Contact-TC-Cloud-TC-Router-2.x-XSS-Memory-Consumption.html
CVE ID: CVE-2023-3527 State: PUBLISHED Published: 2023-07-18T21:10:36.841Z Last Updated: 2024-10-21T14:36:19.410Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:L) Vendors: Avaya Products: Avaya Call Management System Problem Types: CWE-1236 Description: A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges to input crafted data which, when exported to a CSV file, may attempt arbitrary command execution on the system used to open the file by a spreadsheet software such as Microsoft Excel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
eadsheet software such as Microsoft Excel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.avaya.com/css/public/documents/101086364
CVE ID: CVE-2023-3528 State: PUBLISHED Published: 2023-07-06T18:00:03.991Z Last Updated: 2024-08-02T06:55:03.684Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ThinuTech Products: ThinuCMS Problem Types: CWE-89 Description: A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument cat_id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-233252. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233252 - https://vuldb.com/?ctiid.233252
CVE ID: CVE-2023-3529 State: PUBLISHED Published: 2023-07-06T18:31:03.754Z Last Updated: 2024-08-02T06:55:03.583Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Rotem Dynamics Products: Rotem CRM Problem Types: CWE-203 Description: A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the file /LandingPages/api/otp/send?id=[ID][ampersand]method=sms of the component OTP URI Interface. The manipulation leads to information exposure through discrepancy. It is possible to initiate the attack remotely. The identifier VDB-233253 was assigned to this vulnerability. NOTE: The vendor was
ble to initiate the attack remotely. The identifier VDB-233253 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233253 - https://vuldb.com/?ctiid.233253
CVE ID: CVE-2023-3531 State: PUBLISHED Published: 2023-07-06T19:18:45.317Z Last Updated: 2024-11-07T18:23:52.657Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: nilsteampassnet Products: nilsteampassnet/teampass Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/c9f0b3ff-bbc4-4ea1-a59e-8594b48bb414 - https://github.com/nilsteampassnet/teampass/commit/cb8ea5ccca61653895bb6881547e463baa50293d
CVE ID: CVE-2023-3532 State: PUBLISHED Published: 2023-07-07T02:22:00.164Z Last Updated: 2024-11-04T20:34:57.559Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N) Vendors: outline Products: outline/outline Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/ebd2428a-e2cb-480e-ba37-dd89ad62cf1b - https://github.com/outline/outline/commit/9431df45c210e85b77cd27f2ffaf0358b837afa3
CVE ID: CVE-2023-3533 State: PUBLISHED Published: 2023-11-28T07:06:43.738Z Last Updated: 2024-08-02T06:55:03.594Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Chamilo Products: Chamilo Problem Types: CWE-22 Description: Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-124-2023-07-13-Critical-impact-High-risk-
: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-124-2023-07-13-Critical-impact-High-risk-Unauthenticated-Arbitrary-File-Write-RCE-CVE-2023-3533 - https://starlabs.sg/advisories/23/23-3533/ - https://github.com/chamilo/chamilo-lms/commit/37be9ce7243a30259047dd4517c48ff8b21d657a
CVE ID: CVE-2023-3534 State: PUBLISHED Published: 2023-07-07T12:00:04.953Z Last Updated: 2024-08-02T06:55:03.700Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Shopping Website Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-233286 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Contai
may be used. VDB-233286 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233286 - https://vuldb.com/?ctiid.233286 - https://github.com/DUA0G/cve/blob/main/1.pdf
CVE ID: CVE-2023-3535 State: PUBLISHED Published: 2023-07-07T12:31:03.141Z Last Updated: 2024-11-21T15:59:50.407Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SimplePHPscripts Products: FAQ Script PHP Problem Types: CWE-79 Description: A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233287. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ntifier of this vulnerability is VDB-233287. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233287 - https://vuldb.com/?ctiid.233287
CVE ID: CVE-2023-3536 State: PUBLISHED Published: 2023-07-07T13:00:03.923Z Last Updated: 2024-08-02T06:55:03.638Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SimplePHPscripts Products: Funeral Script PHP Problem Types: CWE-79 Description: A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233288. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.
his vulnerability is VDB-233288. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233288 - https://vuldb.com/?ctiid.233288
CVE ID: CVE-2023-3537 State: PUBLISHED Published: 2023-07-07T13:31:03.298Z Last Updated: 2024-08-02T06:55:03.365Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SimplePHPscripts Products: News Script PHP Pro Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-233289 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.2332
igned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233289 - https://vuldb.com/?ctiid.233289
CVE ID: CVE-2023-3538 State: PUBLISHED Published: 2023-07-07T14:00:04.620Z Last Updated: 2024-10-23T20:52:15.452Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SimplePHPscripts Products: Photo Gallery PHP Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vu
this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233290 - https://vuldb.com/?ctiid.233290
CVE ID: CVE-2023-3539 State: PUBLISHED Published: 2023-07-07T14:31:03.314Z Last Updated: 2024-08-02T06:55:03.600Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SimplePHPscripts Products: Simple Forum PHP Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. This issue affects some unknown processing of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-233291. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.c
er of this vulnerability is VDB-233291. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233291 - https://vuldb.com/?ctiid.233291
CVE ID: CVE-2023-3540 State: PUBLISHED Published: 2023-07-07T15:00:04.918Z Last Updated: 2024-10-23T20:40:14.795Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SimplePHPscripts Products: NewsLetter Script PHP Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-233292. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
s vulnerability is VDB-233292. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233292 - https://vuldb.com/?ctiid.233292
CVE ID: CVE-2023-3541 State: PUBLISHED Published: 2023-07-07T15:31:03.050Z Last Updated: 2024-08-02T07:01:56.497Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: ThinuTech Products: ThinuCMS Problem Types: CWE-79 Description: A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /author_posts.php. The manipulation of the argument author with the input g6g12<script>alert(1)</script>o8sdm leads to cross site scripting. The attack can be launched remotely. The identifier VDB-233293 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
entifier VDB-233293 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233293 - https://vuldb.com/?ctiid.233293
CVE ID: CVE-2023-3542 State: PUBLISHED Published: 2023-07-07T16:00:04.384Z Last Updated: 2024-10-23T20:38:57.653Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: ThinuTech Products: ThinuCMS Problem Types: CWE-79 Description: A vulnerability was found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument name/body leads to cross site scripting. The attack may be launched remotely. VDB-233294 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233294 - https://
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233294 - https://vuldb.com/?ctiid.233294
CVE ID: CVE-2023-3543 State: PUBLISHED Published: 2023-07-07T16:31:03.363Z Last Updated: 2024-08-02T07:01:57.514Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: GZ Scripts Products: Availability Booking Calendar PHP Problem Types: CWE-79 Description: A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file load.php of the component HTTP POST Request Handler. The manipulation of the argument cid/first_name/second_name/address_1/country leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-233295. NOTE:
ng. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-233295. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233295 - https://vuldb.com/?ctiid.233295