Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3874 State: PUBLISHED Published: 2023-07-25T01:00:05.230Z Last Updated: 2024-08-02T07:08:50.472Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235236. Additional Analyst Notes: - CVE
osed to the public and may be used. The identifier of this vulnerability is VDB-235236. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235236 - https://vuldb.com/?ctiid.235236 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%206.pdf
CVE ID: CVE-2023-3875 State: PUBLISHED Published: 2023-07-25T01:31:03.554Z Last Updated: 2024-10-15T19:22:15.287Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/del_feedback.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235237 was assigned to this vulnerability. Additional An
een disclosed to the public and may be used. The identifier VDB-235237 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235237 - https://vuldb.com/?ctiid.235237 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%207.pdf
CVE ID: CVE-2023-3876 State: PUBLISHED Published: 2023-07-25T02:00:05.168Z Last Updated: 2024-08-02T07:08:50.612Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-235238 is the identifier assigned to this vulnerability. Additional An
been disclosed to the public and may be used. VDB-235238 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235238 - https://vuldb.com/?ctiid.235238 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%208.pdf
CVE ID: CVE-2023-3877 State: PUBLISHED Published: 2023-07-25T02:31:03.934Z Last Updated: 2025-07-29T13:37:14.646Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235239. Additional Analyst Notes: -
o the public and may be used. The associated identifier of this vulnerability is VDB-235239. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235239 - https://vuldb.com/?ctiid.235239 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%209.pdf
CVE ID: CVE-2023-3878 State: PUBLISHED Published: 2023-07-25T03:00:06.081Z Last Updated: 2024-10-15T19:20:15.130Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235240. Additional Analyst Notes: - CVE Program
the public and may be used. The identifier of this vulnerability is VDB-235240. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235240 - https://vuldb.com/?ctiid.235240 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2010.pdf
CVE ID: CVE-2023-3879 State: PUBLISHED Published: 2023-07-25T03:31:03.408Z Last Updated: 2024-08-02T07:08:50.410Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/del_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235241 was assigned to this vulnerability. Additional Analyst Notes: - CVE
he public and may be used. The identifier VDB-235241 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235241 - https://vuldb.com/?ctiid.235241 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2011.pdf
CVE ID: CVE-2023-3880 State: PUBLISHED Published: 2023-07-25T04:00:05.649Z Last Updated: 2024-08-02T07:08:50.672Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/del_service.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235242 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA AD
public and may be used. VDB-235242 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.235242 - https://vuldb.com/?ctiid.235242 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2012.pdf
CVE ID: CVE-2023-3881 State: PUBLISHED Published: 2023-07-25T04:31:04.023Z Last Updated: 2024-08-02T07:08:50.655Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235243. Additional An
en disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235243. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235243 - https://vuldb.com/?ctiid.235243 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2013.pdf
CVE ID: CVE-2023-3882 State: PUBLISHED Published: 2023-07-25T05:00:04.917Z Last Updated: 2024-08-02T07:08:50.672Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the argument contactno leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235244. Add
y. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235244. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235244 - https://vuldb.com/?ctiid.235244 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2014.pdf
CVE ID: CVE-2023-3883 State: PUBLISHED Published: 2023-07-25T05:31:03.535Z Last Updated: 2024-08-02T07:08:50.667Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/add-category.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235245 was assigned to this vulnerability. Additional Analyst No
losed to the public and may be used. The identifier VDB-235245 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235245 - https://vuldb.com/?ctiid.235245 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2015.pdf
CVE ID: CVE-2023-3884 State: PUBLISHED Published: 2023-07-25T06:00:04.974Z Last Updated: 2024-11-21T15:47:59.497Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-79 Description: A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235246 is the identifier assigned to this vulnerability. Additional Analyst Notes:
d to the public and may be used. VDB-235246 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235246 - https://vuldb.com/?ctiid.235246 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2016.pdf
CVE ID: CVE-2023-3885 State: PUBLISHED Published: 2023-07-25T06:31:03.926Z Last Updated: 2024-08-02T07:08:50.661Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/edit_category.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235247. Additional Analyst Notes:
to the public and may be used. The associated identifier of this vulnerability is VDB-235247. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235247 - https://vuldb.com/?ctiid.235247 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2017.pdf
CVE ID: CVE-2023-3886 State: PUBLISHED Published: 2023-07-25T07:00:14.897Z Last Updated: 2024-08-02T07:08:50.677Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/invoice.php. The manipulation of the argument inv_id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235248. Additional Analyst Notes: - CVE
osed to the public and may be used. The identifier of this vulnerability is VDB-235248. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235248 - https://vuldb.com/?ctiid.235248 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2018.pdf
CVE ID: CVE-2023-3887 State: PUBLISHED Published: 2023-07-25T07:31:03.135Z Last Updated: 2024-08-02T07:08:50.577Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235249 was assigned to this vulner
ely. The exploit has been disclosed to the public and may be used. The identifier VDB-235249 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235249 - https://vuldb.com/?ctiid.235249 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2019.pdf
CVE ID: CVE-2023-3888 State: PUBLISHED Published: 2023-07-25T08:00:04.292Z Last Updated: 2024-10-15T19:06:49.786Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-235250 is the identifier assigned to this vulnerability. Additio
t has been disclosed to the public and may be used. VDB-235250 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235250 - https://vuldb.com/?ctiid.235250 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2020.pdf
CVE ID: CVE-2023-3889 State: PUBLISHED Published: 2023-11-07T15:28:43.500Z Last Updated: 2025-03-24T18:00:09.732Z Vendors: Arm Ltd Products: Valhall GPU Kernel Driver Problem Types: CWE-119, CWE-667 Description: A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2023-3890 State: PUBLISHED Published: 2023-07-25T08:31:03.628Z Last Updated: 2024-08-02T07:08:50.664Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Beauty Salon Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/edit-accepted-appointment.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235251. Additional Analy
disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235251. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235251 - https://vuldb.com/?ctiid.235251 - https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2021.pdf
CVE ID: CVE-2023-3891 State: PUBLISHED Published: 2023-09-15T02:07:22.888Z Last Updated: 2025-09-25T17:22:26.081Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Lapce Products: Lapce Problem Types: CWE-367 Description: Race condition in Lapce v0.2.8 allows an attacker to elevate privileges on the system Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/aerosmith - https://lapce.dev - https://github.com/lapce/lapce/releases/tag/v0.3.0
CVE ID: CVE-2023-3892 State: PUBLISHED Published: 2023-09-19T14:54:12.524Z Last Updated: 2024-09-25T15:08:19.819Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H) Vendors: MIM Software Products: MIM Assistant, MIM Client Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference vulnerability in MIM Assistant and Client DICOM RTst Loading modules allows XML Entity Linking / XML External Entities Blowup. In order to take advantage of this vulnerability, an attacker must craft a malicious XML document, embed this document into specific 3rd party private RTst metadata tags, transfer the now compromised DICOM object to MIM, and force MIM to
into specific 3rd party private RTst metadata tags, transfer the now compromised DICOM object to MIM, and force MIM to archive and load the data. Users on either version are strongly encouraged to update to an unaffected version (7.2.11+, 7.3.4+). This issue was found and analyzed by MIM Software's internal security team. We are unaware of any proof of concept or actual exploit available in the wild. For more information, visit https://www.mimsoftware.com/cve-2023-3892 https://www.mimsoftware.com/cve-2023-3892 This issue affects MIM Assistant: 7.2.10, 7.3.3; MIM Client: 7.2.10, 7.3.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mimso
2.10, 7.3.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mimsoftware.com/cve-2023-3892
CVE ID: CVE-2023-3893 State: PUBLISHED Published: 2023-11-03T17:34:10.188Z Last Updated: 2025-02-13T17:02:36.473Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: csi-proxy Problem Types: CWE-20 Description: A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/119594 - https://groups.google.com/g/kubern
ram Container: References: - https://github.com/kubernetes/kubernetes/issues/119594 - https://groups.google.com/g/kubernetes-security-announce/c/lWksE2BoCyQ - https://security.netapp.com/advisory/ntap-20231221-0004/
CVE ID: CVE-2023-3894 State: PUBLISHED Published: 2023-08-08T16:59:58.129Z Last Updated: 2024-09-27T16:07:38.896Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: FasterXML Products: jackson-dataformats-text Problem Types: CWE-20 Description: Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issue
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50083 - https://github.com/FasterXML/jackson-dataformats-text/pull/398 - https://github.com/FasterXML/jackson-dataformats-text/blob/2.16/release-notes/VERSION-2.x
CVE ID: CVE-2023-3896 State: PUBLISHED Published: 2023-08-07T12:13:37.229Z Last Updated: 2025-02-13T17:02:37.040Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OpenCloudOS Products: OpenCloudOS Stream Problem Types: CWE-369 Description: Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vim/vim/issues/12528 - https://github.com/vim/vim/pull/12540 - https://security.netapp.com/advisory/ntap-20230831-0012/
CVE ID: CVE-2023-3897 State: PUBLISHED Published: 2023-07-25T08:59:31.668Z Last Updated: 2025-02-13T17:02:37.670Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Onpremise SureMDM Solution Products: SureMDM Onpremise Problem Types: CWE-203 Description: Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version Additional Analyst Notes: - CVE Program Container: References: - https://www.42gears.com/security-and-compliance - http://packetstormsecurity.com/files/177179/SureMDM-O
r: References: - https://www.42gears.com/security-and-compliance - http://packetstormsecurity.com/files/177179/SureMDM-On-Premise-CAPTCHA-Bypass-User-Enumeration.html
CVE ID: CVE-2023-3898 State: PUBLISHED Published: 2023-08-08T08:55:44.939Z Last Updated: 2024-10-10T17:52:58.535Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mAyaNet Products: E-Commerce Software Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mAyaNet E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0440