Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
file paths when processing image references during task exports. By creating tasks with path traversal sequences in the image field, an attacker can force the application to read files from arbitrary server filesystem locations when exporting projects in any of the mentioned formats. This is authentication-required vulnerability allowing arbitrary file reads from the server filesystem. It may lead to potential exposure of sensitive information like configuration files, credentials, and confidential data. Label Studio versions before 1.16.0 specified SDK versions prior to 1.0.10 as dependencies, and the issue was confirmed in Label Studio version 1.13.2.dev0; therefore, Label Studio users sho
0.10 as dependencies, and the issue was confirmed in Label Studio version 1.13.2.dev0; therefore, Label Studio users should upgrade to 1.16.0 or newer to mitigate it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/HumanSignal/label-studio/security/advisories/GHSA-rgv9-w7jp-m23g - https://github.com/HumanSignal/label-studio-sdk/commit/4a9715c6b0b619371e89c09ea8d1c86ce5c880df
CVE ID: CVE-2025-25296 State: PUBLISHED Published: 2025-02-14T19:24:03.961Z Last Updated: 2025-02-14T20:01:37.255Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: HumanSignal Products: label-studio Problem Types: CWE-79 Description: Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's `/projects/upload-example` endpoint allows injection of arbitrary HTML through a `GET` request with an appropriately crafted `label_config` query parameter. By crafting a specially formatted XML label config with inline task data containing malicious HTML/JavaScript, an attacker can achieve Cross-Site Scripting (XSS). While the application
sk data containing malicious HTML/JavaScript, an attacker can achieve Cross-Site Scripting (XSS). While the application has a Content Security Policy (CSP), it is only set in report-only mode, making it ineffective at preventing script execution. The vulnerability exists because the upload-example endpoint renders user-provided HTML content without proper sanitization on a GET request. This allows attackers to inject and execute arbitrary JavaScript in victims' browsers by getting them to visit a maliciously crafted URL. This is considered vulnerable because it enables attackers to execute JavaScript in victims' contexts, potentially allowing theft of sensitive data, session hijacking, or ot
ckers to execute JavaScript in victims' contexts, potentially allowing theft of sensitive data, session hijacking, or other malicious actions. Version 1.16.0 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/HumanSignal/label-studio/security/advisories/GHSA-wpq5-3366-mqw4 - https://github.com/HumanSignal/label-studio/commit/8cf6958e1e27ef6a03ed287e674470975d340885
CVE ID: CVE-2025-25297 State: PUBLISHED Published: 2025-02-14T19:25:50.893Z Last Updated: 2025-02-14T19:56:41.724Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: HumanSignal Products: label-studio Problem Types: CWE-918 Description: Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's S3 storage integration feature contains a Server-Side Request Forgery (SSRF) vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a custom S3 endpoint URL via the s3_endpoint parameter. This endpoint URL is passed directly to the boto3 AWS SDK without proper validation o
URL via the s3_endpoint parameter. This endpoint URL is passed directly to the boto3 AWS SDK without proper validation or restrictions on the protocol or destination. The vulnerability allows an attacker to make the application send HTTP requests to arbitrary internal services by specifying them as the S3 endpoint. When the storage sync operation is triggered, the application attempts to make S3 API calls to the specified endpoint, effectively making HTTP requests to the target service and returning the response in error messages. This SSRF vulnerability enables attackers to bypass network segmentation and access internal services that should not be accessible from the external network. The
o bypass network segmentation and access internal services that should not be accessible from the external network. The vulnerability is particularly severe because error messages from failed requests contain the full response body, allowing data exfiltration from internal services. Version 1.16.0 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/HumanSignal/label-studio/security/advisories/GHSA-m238-fmcw-wh58 - https://github.com/HumanSignal/label-studio/commit/06a2b29c1208e1878ccae66e6b84c8b24598fa79
CVE ID: CVE-2025-25298 State: PUBLISHED Published: 2025-10-16T16:21:45.585Z Last Updated: 2025-10-16T18:12:49.837Z Vendors: strapi Products: strapi Problem Types: CWE-261 Description: Strapi is an open source headless CMS. The @strapi/core package before version 5.10.3 does not enforce a maximum password length when using bcryptjs for password hashing. Bcryptjs ignores any bytes beyond 72, so passwords longer than 72 bytes are silently truncated. A user can create an account with a password exceeding 72 bytes and later authenticate with only the first 72 bytes. This reduces the effective entropy of overlong passwords and may mislead users who believe characters beyond 72 bytes are required,
the effective entropy of overlong passwords and may mislead users who believe characters beyond 72 bytes are required, creating a low likelihood of unintended authentication if an attacker can obtain or guess the truncated portion. Long over‑length inputs can also impose unnecessary processing overhead. The issue is fixed in version 5.10.3. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/strapi/strapi/security/advisories/GHSA-2cjv-6wg9-f4f3 - https://github.com/strapi/strapi/commit/41f8cdf116f7f464dae7d591e52d88f7bfa4b7cb
CVE ID: CVE-2025-25299 State: PUBLISHED Published: 2025-02-20T19:23:03.013Z Last Updated: 2025-02-20T19:47:33.534Z Vendors: ckeditor Products: ckeditor5 Problem Types: CWE-79, CWE-80 Description: CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting (XSS) vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within the document. It can lead to unauthorized JavaScript code execution, which might happen with a very specific editor and token endpoint configuration. This vulnerability affects only installations with Real
en with a very specific editor and token endpoint configuration. This vulnerability affects only installations with Real-time collaborative editing enabled. The problem has been recognized and patched. The fix is available in version 44.2.1 (and above). Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-j3mm-wmfm-mwvh - https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html - https://github.com/ckeditor/ckeditor5/releases/tag/v44.2.1
CVE ID: CVE-2025-25300 State: PUBLISHED Published: 2025-02-18T17:38:52.088Z Last Updated: 2025-02-18T18:53:49.770Z Vendors: ain Products: smartbanner.js Problem Types: CWE-601, CWE-79 Description: smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner `View` link and navigating to 3rd party page leaves `window.opener` exposed. It may allow hostile third parties to abuse `window.opener`, e.g. by redirection or injection on the original page with smartbanner. `rel="noopener"` is automatically populated to links as of `v1.14.1` which is a recommended upgrade to resolve the vulnerability. Some workarounds are available for those wh
as of `v1.14.1` which is a recommended upgrade to resolve the vulnerability. Some workarounds are available for those who cannot upgrade. Ensure `View` link is only taking users to App Store or Google Play Store where security is guarded by respective app store security teams. If `View` link is going to a third party page, limit smartbanner.js to be used on iOS that decreases the scope of the vulnerability since as of Safari 12.1, `rel="noopener"` is imposed on all `target="_blank"` links. Version 1.14.1 of smartbanner.js contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ain/smartbanner.js/security/advisories/GHSA-9mrq-cjgh-32g2
es: - CISA ADP Vulnrichment: References: - https://github.com/ain/smartbanner.js/security/advisories/GHSA-9mrq-cjgh-32g2 - https://github.com/ain/smartbanner.js/security/advisories/GHSA-9mrq-cjgh-32g2 - https://github.com/ain/smartbanner.js/commit/fce8c31dfe04033d9d005a89694d3e7a60784f89
CVE ID: CVE-2025-25301 State: PUBLISHED Published: 2025-03-03T16:36:09.633Z Last Updated: 2025-03-03T18:27:16.511Z Vendors: danielgatis Products: rembg Problem Types: CWE-918 Description: Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on the internal network of the rembg server. This issue may lead to Information Disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg/
CVE ID: CVE-2025-25302 State: PUBLISHED Published: 2025-03-03T16:40:34.811Z Last Updated: 2025-03-03T17:55:31.580Z Vendors: danielgatis Products: rembg Problem Types: CWE-346 Description: Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to the rembg server and thus query any API. Even if authentication were to be enabled, allow_credentials is set to True, which would allow any website to send authenticated cross site requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-161_G
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg/ - https://github.com/danielgatis/rembg/blob/d1e00734f8a996abf512a3a5c251c7a9a392c90a/rembg/commands/s_command.py#L93
CVE ID: CVE-2025-25303 State: PUBLISHED Published: 2025-03-03T16:47:10.222Z Last Updated: 2025-03-04T16:43:10.695Z Vendors: ttop32 Products: MouseTooltipTranslator Problem Types: CWE-918 Description: The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user. Because pdf.mjs is imported in viewer.html and viewer.html is accessible to all URLs, an attacker can force the user’s browser to make a request to any arbitrary URL. After discussion with maintainer, pat
, an attacker can force the user’s browser to make a request to any arbitrary URL. After discussion with maintainer, patching this issue would require disabling a major feature of the extension in exchange for a low severity vulnerability. Decision to not patch issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-018_MouseTooltipTranslator/ - https://github.com/ttop32/MouseTooltipTranslator/blob/0.1.127/public/manifest.json#L23 - https://github.com/ttop32/MouseTooltipTranslator/blob/0.1.127/public/pdfjs/build/pdf.mjs#L13932
CVE ID: CVE-2025-25304 State: PUBLISHED Published: 2025-02-14T19:28:00.388Z Last Updated: 2025-02-14T19:44:24.152Z Vendors: vega Products: vega Problem Types: CWE-79 Description: Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to version 5.26.0 of vega and 5.4.2 of vega-selections, the `vlSelectionTuples` function can be used to call JavaScript functions, leading to cross-site scripting.`vlSelectionTuples` calls multiple functions that can be controlled by an attacker, including one call with an attacker-controlled argument. This can be used to call `Function()` with arbitrary JavaScript and the resulting functi
n attacker-controlled argument. This can be used to call `Function()` with arbitrary JavaScript and the resulting function can be called with `vlSelectionTuples` or using a type coercion to call `toString` or `valueOf`. Version 5.26.0 of vega and 5.4.2 of vega-selections fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vega/vega/security/advisories/GHSA-mp7w-mhcv-673j - https://github.com/vega/vega/commit/9fb9ea07e27984394e463d286eb73944fa61411e - https://github.com/vega/vega/blob/b45cf431cd6c0d0c0e1567f087f9b3b55bc236fa/packages/vega-selections/src/selectionTuples.js#L14
CVE ID: CVE-2025-25305 State: PUBLISHED Published: 2025-02-18T18:53:10.870Z Last Updated: 2025-02-18T19:23:41.622Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: home-assistant Products: core Problem Types: CWE-940 Description: Home Assistant Core is an open source home automation that puts local control and privacy first. Affected versions are subject to a potential man-in-the-middle attacks due to missing SSL certificate verification in the project codebase and used third-party libraries. In the past, `aiohttp-session`/`request` had the parameter `verify_ssl` to control SSL certificate verification. This was a boolean value. In `aiohttp` 3.0, this parameter w
meter `verify_ssl` to control SSL certificate verification. This was a boolean value. In `aiohttp` 3.0, this parameter was deprecated in favor of the `ssl` parameter. Only when `ssl` is set to `None` or provided with a correct configured SSL context the standard SSL certificate verification will happen. When migrating integrations in Home Assistant and libraries used by Home Assistant, in some cases the `verify_ssl` parameter value was just moved to the new `ssl` parameter. This resulted in these integrations and 3rd party libraries using `request.ssl = True`, which unintentionally turned off SSL certificate verification and opened up a man-in-the-middle attack vector. This issue has been ad
tionally turned off SSL certificate verification and opened up a man-in-the-middle attack vector. This issue has been addressed in version 2024.1.6 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/home-assistant/core/security/advisories/GHSA-m3pm-rpgg-5wj6
CVE ID: CVE-2025-25306 State: PUBLISHED Published: 2025-03-10T18:13:45.515Z Last Updated: 2025-03-12T19:49:47.787Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N) Vendors: misskey-dev Products: misskey Problem Types: CWE-346, CWE-441, CWE-1025 Description: Misskey is an open source, federated social media platform. The patch for CVE-2024-52591 did not sufficiently validate the relation between the `id` and `url` fields of ActivityPub objects. An attacker can forge an object where they claim authority in the `url` field even if the specific ActivityPub object type require authority in the `id` field. Version 2025.2.1 addresses the issue. Additional Analyst Notes: -
yPub object type require authority in the `id` field. Version 2025.2.1 addresses the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/misskey-dev/misskey/security/advisories/GHSA-6w2c-vf6f-xf26 - https://github.com/misskey-dev/misskey/releases/tag/2025.2.1
CVE ID: CVE-2025-25323 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:54:48.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250111-51Job/250111-51Job.pdf
CVE ID: CVE-2025-25324 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:53:23.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250111-AiShanDong/250111-AiShanDong.pdf
CVE ID: CVE-2025-25325 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:52:30.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250112-YuPaoDirectHire/250112-YuPaoDirectHire.pdf
CVE ID: CVE-2025-25326 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:37:12.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250115-MerchantsUnionFinance/250115-MerchantsUnionFinance.pdf
CVE ID: CVE-2025-25329 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:16:11.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250116-TencentMicroVision/250116-TencentMicroVision.pdf
CVE ID: CVE-2025-25330 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:57:20.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250116-BooheeHealth/250116-BooheeHealth.pdf
CVE ID: CVE-2025-25331 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:56:36.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250116-LianJia/250116-LianJia.pdf
CVE ID: CVE-2025-25333 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-27T20:05:28.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250116-IKEACN/250116-IKEACN.pdf
CVE ID: CVE-2025-25334 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:55:51.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZhouZiyi1/Vuls/blob/main/250116-SuningEMall/250116-SuningEMall.pdf
CVE ID: CVE-2025-25343 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-03-05T18:41:55.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wy876/cve/issues/4
CVE ID: CVE-2025-25349 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-03-05T18:47:17.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vkcyberexpert/CVE-Writeup/blob/main/PHPGurukul/Daily%20Expense%20Tracker%20System/SQL%20Injection%20item%20add-expense%20costitem%20parameter.pdf
CVE ID: CVE-2025-25351 State: PUBLISHED Published: 2025-02-12T00:00:00.000Z Last Updated: 2025-05-12T15:24:02.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vkcyberexpert/CVE-Writeup/blob/main/PHPGurukul/Daily%20Expense%20Tracker%20System/SQL%20Injection%20dateexpense%20daily%20expense.pdf
CVE ID: CVE-2025-25352 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-02-14T19:05:55.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20About.pdf
CVE ID: CVE-2025-25354 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-02-14T19:06:53.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactnumber POST request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20contact.pdf
CVE ID: CVE-2025-25355 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-02-14T19:16:25.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20fromdate.pdf
CVE ID: CVE-2025-25356 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-02-14T19:08:02.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the " todate" POST request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20tadate.pdf