Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222852. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222852 - https://vuldb.com/?ctiid.222852 - https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(1).pdf
CVE ID: CVE-2023-1354 State: PUBLISHED Published: 2023-03-11T17:41:41.628Z Last Updated: 2024-08-02T05:41:00.223Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Design and Implementation of Covid-19 Directory on Vaccination System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file register.php. The manipulation of the argument txtfullname/txtage/txtaddress/txtphone leads to cross site scripting. The attack can be launched remotely. The exploit has be
llname/txtage/txtaddress/txtphone leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222853 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222853 - https://vuldb.com/?ctiid.222853 - https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(2).pdf
CVE ID: CVE-2023-1355 State: PUBLISHED Published: 2023-03-11T00:00:00.000Z Last Updated: 2025-02-27T19:54:56.755Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/4d0a9615-d438-4f5c-8dd6-aa22f4b716d9 - https://github.com/vim/vim/commit/d13dd30240e32071210f55b587182ff48757ea46 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/
CVE ID: CVE-2023-1356 State: PUBLISHED Published: 2023-10-25T10:28:58.144Z Last Updated: 2024-09-17T14:07:38.687Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-79 Description: Reflected cross-site scripting in the StudentSearch component in IDAttend’s IDWeb application 3.1.052 and earlier allows hijacking of a user’s browsing session by attackers who have convinced the said user to click on a malicious link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-1356
CVE ID: CVE-2023-1357 State: PUBLISHED Published: 2023-03-12T07:31:03.736Z Last Updated: 2025-02-27T19:17:45.188Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Bakery Shop Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifie
ection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222860. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222860 - https://vuldb.com/?ctiid.222860
CVE ID: CVE-2023-1358 State: PUBLISHED Published: 2023-03-12T07:31:04.695Z Last Updated: 2024-08-02T05:41:00.209Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Gadget Works Online Ordering System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argument user_email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-22
ble to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222861 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222861 - https://vuldb.com/?ctiid.222861 - https://github.com/heitaoa999/bug_report/blob/main/vendors/janobe/Gadget%20Works%20Online%20Ordering%20System/SQLi-1.md
CVE ID: CVE-2023-1359 State: PUBLISHED Published: 2023-03-12T08:00:04.285Z Last Updated: 2025-02-27T19:17:06.224Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Gadget Works Online Ordering System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /philosophy/admin/user/controller.php?action=add of the component Add New User. The manipulation of the argument U_NAME leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-22
te scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222862 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222862 - https://vuldb.com/?ctiid.222862 - https://github.com/heitaoa999/bug_report/blob/main/vendors/janobe/Gadget%20Works%20Online%20Ordering%20System/XSS-1.md
CVE ID: CVE-2023-1360 State: PUBLISHED Published: 2023-03-12T08:31:02.981Z Last Updated: 2025-02-27T19:16:38.487Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Employee Payslip Generator with Sending Mail Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated
ion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222863. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222863 - https://vuldb.com/?ctiid.222863 - https://blog.0xgabe.com/?p=90
CVE ID: CVE-2023-1361 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T19:15:57.399Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: unilogies Products: unilogies/bumsys Problem Types: CWE-89 Description: SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1b1dbc5a-df16-421f-9a0d-de83e43146c4 - https://github.com/unilogies/bumsys/commit/6a328eb5bf9dbb44329a3df82e95683b77c4730d
CVE ID: CVE-2023-1362 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T19:15:29.873Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: unilogies Products: unilogies/bumsys Problem Types: CWE-1021 Description: Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e5959166-c8ef-4ada-9bb1-0ff5a9693bac - https://github.com/unilogies/bumsys/commit/8c5b27d54707f9805b27ef26ad741f2801e30e1f
CVE ID: CVE-2023-1363 State: PUBLISHED Published: 2023-03-13T06:00:04.143Z Last Updated: 2024-08-02T05:49:10.205Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Computer Parts Sales and Inventory System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add User Account. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222870 is the identifier assigned to this vu
remotely. The exploit has been disclosed to the public and may be used. VDB-222870 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222870 - https://vuldb.com/?ctiid.222870 - https://github.com/Songs-YZS/CveList/blob/main/Computer-Parts-Sales-and-Inventory-System-has-Cross-Site-Scriptin-vulnerability.pdf
CVE ID: CVE-2023-1364 State: PUBLISHED Published: 2023-03-13T07:31:03.195Z Last Updated: 2024-08-02T05:49:10.200Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Pizza Ordering System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file category.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerabi
ched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222871. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222871 - https://vuldb.com/?ctiid.222871 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Pizza%20Ordering%20System/Online%20Pizza%20Ordering%20System%20sql%20vlun(1).pdf
CVE ID: CVE-2023-1365 State: PUBLISHED Published: 2023-03-13T08:00:05.230Z Last Updated: 2024-08-02T05:49:10.324Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Pizza Ordering System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222872. Additional Analyst Notes: - CVE
osed to the public and may be used. The identifier of this vulnerability is VDB-222872. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222872 - https://vuldb.com/?ctiid.222872 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Pizza%20Ordering%20System/Online%20Pizza%20Ordering%20System%20sql%20vlun(3).pdf
CVE ID: CVE-2023-1366 State: PUBLISHED Published: 2023-03-13T08:31:02.999Z Last Updated: 2024-08-02T05:49:10.252Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Yoga Class Registration System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This affects the function query of the file admin/categories/manage_category.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222873 was assigned to this vulnerability. Addi
oit has been disclosed to the public and may be used. The identifier VDB-222873 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222873 - https://vuldb.com/?ctiid.222873 - https://blog.csdn.net/Dwayne_Wade/article/details/129493110
CVE ID: CVE-2023-1367 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T19:14:53.726Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: alextselegidis Products: alextselegidis/easyappointments Problem Types: CWE-94 Description: Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/16bc74e2-1825-451f-bff7-bfdc1ea75cc2 - https://github.com/alextselegidis/easyappointments/commit/453c6e130229718680c91bef450db643a0f263e4
CVE ID: CVE-2023-1368 State: PUBLISHED Published: 2023-03-13T08:31:04.046Z Last Updated: 2025-02-27T19:12:00.223Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: XHCMS Problem Types: CWE-89 Description: A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component POST Parameter Handler. The manipulation of the argument user leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222874 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222874 - https://vuldb.com/?ctiid.222874 - https://github.com/wswokao/wswoako.github.io/blob/main/README.md
CVE ID: CVE-2023-1369 State: PUBLISHED Published: 2023-03-13T09:00:05.427Z Last Updated: 2024-11-22T21:51:13.683Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: TG Soft Products: Vir.IT eXplorer Problem Types: CWE-404 Description: A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 9.5 is able to address this issue. It is recommended to u
disclosed to the public and may be used. Upgrading to version 9.5 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222875. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222875 - https://vuldb.com/?ctiid.222875 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1369 - https://drive.google.com/file/d/1xqJUMsAWnXx4JmlbT0D0yMBJiMy484QS/view?usp=sharing - https://www.tgsoft.it/scripts/getfile.asp?lang=ITA
CVE ID: CVE-2023-1370 State: PUBLISHED Published: 2023-03-13T09:04:36.365Z Last Updated: 2025-02-27T19:09:50.662Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: json-smart Products: json-smart Problem Types: CWE-674 Description: [Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays and objects is done recursively, nesting too many of them can cause a stack exhaustion (stack overf
ing of nested arrays and objects is done recursively, nesting too many of them can cause a stack exhaustion (stack overflow) and crash the software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/ - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2023-1371 State: PUBLISHED Published: 2023-04-17T12:17:47.972Z Last Updated: 2025-02-06T15:25:13.265Z Vendors: Unknown Products: W4 Post List Problem Types: CWE-862 Missing Authorization Description: The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content, which could allow any authenticated users to access them Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ad5c167e-77f7-453c-9443-df6e07705d89
CVE ID: CVE-2023-1372 State: PUBLISHED Published: 2023-03-13T12:20:15.984Z Last Updated: 2025-01-13T16:58:05.853Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: webhostings Products: WH Testimonials Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WH Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters such as wh_homepage, wh_text_short, wh_text_full and in versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts i
sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b6fe5f1a-787e-4662-915f-c6f04961e194 - https://danielkelley.me/wh-testimonials-reflected-xss-vulnerability-via-wh-homepage-parameter-in-version-3-0-0-and-below/ - https://plugins.trac.wordpress.org/browser/wh-testimonials/trunk/wh-testimonials.php#L177
CVE ID: CVE-2023-1373 State: PUBLISHED Published: 2023-04-17T12:17:43.963Z Last Updated: 2025-02-06T16:18:40.856Z Vendors: Unknown Products: W4 Post List Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The W4 Post List WordPress plugin before 2.4.6 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fa38f3e6-e04c-467c-969b-0f6736087589
CVE ID: CVE-2023-1374 State: PUBLISHED Published: 2023-03-13T12:31:14.260Z Last Updated: 2025-01-13T16:57:55.811Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: solidres Products: Solidres – Hotel booking plugin for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currency_name' parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator privileges to inject arbitrary web s
put escaping. This makes it possible for authenticated attackers with administrator privileges to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b13ee51b-9f23-428f-9cef-4a9b9b06b0c4 - https://danielkelley.me/solidres-hotel-booking-plugin-for-wordpress-post-based-xss-vulnerability-in-add-new-currency-feature/ - https://plugins.trac.wordpress.org/browser/solidres/trunk/admin/currencies/edit.php#L15
CVE ID: CVE-2023-1375 State: PUBLISHED Published: 2023-06-09T05:33:27.343Z Last Updated: 2024-12-20T23:37:44.214Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: emrevona Products: WP Fastest Cache Problem Types: CWE-862 Missing Authorization Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including, 1.1.2 due to a missing capability check in the deleteCacheToolbar function . This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete the site's cache. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
ove, to delete the site's cache. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ae643666-70cb-4eb4-a183-e1649264ded4?source=cve - https://plugins.trac.wordpress.org/browser/wp-fastest-cache/trunk/wpFastestCache.php#L866 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2893158%40wp-fastest-cache&new=2893158%40wp-fastest-cache&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1377 State: PUBLISHED Published: 2023-04-03T14:38:28.439Z Last Updated: 2025-02-14T19:21:18.937Z Vendors: Unknown Products: Solidres Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c346ff80-c16b-4219-8983-708c64fa4a61
CVE ID: CVE-2023-1378 State: PUBLISHED Published: 2023-03-13T17:25:22.844Z Last Updated: 2024-08-02T05:49:10.352Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Friendly Island Pizza Website and Ordering System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This vulnerability affects unknown code of the file paypalsuccess.php of the component POST Parameter Handler. The manipulation of the argument cusid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of t
The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222904. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222904 - https://vuldb.com/?ctiid.222904 - https://github.com/ATW-BlockN/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md
CVE ID: CVE-2023-1379 State: PUBLISHED Published: 2023-03-15T15:10:28.308Z Last Updated: 2025-02-13T21:13:49.773Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Friendly Island Pizza Website and Ordering System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file addmem.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associa