Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d may be used. The real existence of this vulnerability is still doubted at the moment. The identifier VDB-223301 was assigned to this vulnerability. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223301 - https://vuldb.com/?ctiid.223301
CVE ID: CVE-2023-1457 State: PUBLISHED Published: 2023-03-25T00:00:00 Last Updated: 2024-08-02T05:49:11.641Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-77 Description: A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the component Static Routing Configuration Handler. The manipulation of the argument next-hop-interface leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the mo
it has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. VDB-223302 is the identifier assigned to this vulnerability. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223302 - https://vuldb.com/?ctiid.223302
CVE ID: CVE-2023-1458 State: PUBLISHED Published: 2023-03-25T00:00:00 Last Updated: 2024-08-02T05:49:11.425Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-77 Description: A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknown functionality of the component OSPF Handler. The manipulation of the argument area leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The associated id
o the public and may be used. The real existence of this vulnerability is still doubted at the moment. The associated identifier of this vulnerability is VDB-223303. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223303 - https://vuldb.com/?ctiid.223303
CVE ID: CVE-2023-1459 State: PUBLISHED Published: 2023-03-17T07:48:08.896Z Last Updated: 2024-08-02T05:49:11.539Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Canteen Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file changeUsername.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223304. Additional Analyst Notes: - CVE Pro
d to the public and may be used. The identifier of this vulnerability is VDB-223304. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223304 - https://vuldb.com/?ctiid.223304 - https://blog.csdn.net/weixin_43864034/article/details/129621725
CVE ID: CVE-2023-1460 State: PUBLISHED Published: 2023-03-17T07:51:11.507Z Last Updated: 2024-08-02T05:49:11.498Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: SourceCodester Products: Online Pizza Ordering System Problem Types: CWE-287 Description: A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability. Additional Analyst Notes
to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223305 - https://vuldb.com/?ctiid.223305
CVE ID: CVE-2023-1461 State: PUBLISHED Published: 2023-03-17T08:00:10.175Z Last Updated: 2024-08-02T05:49:11.454Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Canteen Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. The attack can be initiated remotely. VDB-223306 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuld
identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223306 - https://vuldb.com/?ctiid.223306 - https://blog.csdn.net/weixin_43864034/article/details/129622219
CVE ID: CVE-2023-1462 State: PUBLISHED Published: 2023-03-21T08:16:26.952Z Last Updated: 2025-02-26T16:54:01.740Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Vadi Corporate Information Systems Products: DigiKent Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Vadi Corporate Information Systems DigiKent allows Authentication Bypass, Authentication Abuse. This issue affects DigiKent: before 23.03.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0161
CVE ID: CVE-2023-1463 State: PUBLISHED Published: 2023-03-17T00:00:00.000Z Last Updated: 2025-02-26T15:00:21.210Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: nilsteampassnet Products: nilsteampassnet/teampass Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f6683c3b-a0f2-4615-b639-1920c8ae12e6 - https://github.com/nilsteampassnet/teampass/commit/4e06fbaf2b78c3615d0599855a72ba7e31157516
CVE ID: CVE-2023-1464 State: PUBLISHED Published: 2023-03-17T11:19:21.455Z Last Updated: 2024-08-02T05:49:11.677Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Medicine Tracker System Problem Types: CWE-287 Description: A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=save_user. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223311. Additional Analyst Notes: - CVE Program Co
tack remotely. The associated identifier of this vulnerability is VDB-223311. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223311 - https://vuldb.com/?ctiid.223311
CVE ID: CVE-2023-1465 State: PUBLISHED Published: 2023-08-16T11:03:27.810Z Last Updated: 2025-05-05T16:07:02.998Z Vendors: Unknown Products: WP EasyPay Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in pages, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/13f59eb4-0744-4fdb-94b5-886ee6bdd867
CVE ID: CVE-2023-1466 State: PUBLISHED Published: 2023-03-17T11:45:20.312Z Last Updated: 2025-02-26T17:15:02.678Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Student Study Center Desk Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function view_student of the file admin/?page=students/view_student. The manipulation of the argument id with the input 3' AND (SELECT 2100 FROM (SELECT(SLEEP(5)))FWlC) AND 'butz'='butz leads to sql injection. The attack may be initiated remotely. The exploit has been discl
LEEP(5)))FWlC) AND 'butz'='butz leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223325 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223325 - https://vuldb.com/?ctiid.223325
CVE ID: CVE-2023-1467 State: PUBLISHED Published: 2023-03-17T11:45:22.279Z Last Updated: 2024-08-02T05:49:11.553Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: SourceCodester Products: Student Study Center Desk Management System Problem Types: CWE-22 Description: A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed
ut C%3A%2Ffoo.txt leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223326 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223326 - https://vuldb.com/?ctiid.223326
CVE ID: CVE-2023-1468 State: PUBLISHED Published: 2023-03-17T11:45:24.209Z Last Updated: 2024-11-22T20:59:08.959Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Student Study Center Desk Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17 of the component Report Handler. The manipulation of the argument date_from/date_to leads to sql injection. The attack can be launched remotely. The associated identifier of
he argument date_from/date_to leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-223327. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223327 - https://vuldb.com/?ctiid.223327
CVE ID: CVE-2023-1469 State: PUBLISHED Published: 2023-03-17T12:31:55.285Z Last Updated: 2025-02-05T19:45:38.551Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: mra13 Products: WP Express Checkout (Accept PayPal Payments Easily) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level access to inj
itization and output escaping. This makes it possible for authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: This can potentially be exploited by lower-privileged users if the `Admin Dashboard Access Permission` setting it set for those users to access the dashboard. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b35ee801-f04d-4b22-8238-053b02a6ee0c?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2879453%40wp-express-checkout&new=287945
ttps://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2879453%40wp-express-checkout&new=2879453%40wp-express-checkout&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1470 State: PUBLISHED Published: 2023-03-17T13:13:15.254Z Last Updated: 2025-01-13T16:57:19.022Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: implecode Products: eCommerce Product Catalog Plugin for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissi
sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/26b7438e-438b-41eb-9458-2fba8ab1964d?source=cve - https://plugins.trac.wordpress.org/changeset/2881773/ecommerce-product-catalog/trunk/modules/price/price-settings.php
CVE ID: CVE-2023-1471 State: PUBLISHED Published: 2023-03-17T13:08:10.311Z Last Updated: 2025-01-13T16:57:27.796Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: access-keys Products: WP Popup Banners Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with minimal permissions, such
reparation on the existing SQL query. This makes it possible for authenticated attackers with minimal permissions, such as a subscrber, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8281cb20-73d3-4ab5-910e-d353b2a5cbd8?source=cve - https://plugins.trac.wordpress.org/browser/wp-popup-banners/trunk/wp-popup-banners.php#L243 - https://plugins.trac.wordpress.org/browser/wp-popup-banners/trunk/wp-popup-banners.php#L246
CVE ID: CVE-2023-1472 State: PUBLISHED Published: 2023-03-17T14:21:32.515Z Last Updated: 2025-01-13T16:57:08.709Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: shakee93 Products: RapidLoad Power-Up for Autoptimize Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an
d attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Actions include resetting the API key, accessing or deleting log files, and deleting cache among others. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8f9ee168-82b1-4d13-a84e-379f16dcb283?source=cve - https://plugins.trac.wordpress.org/browser/unusedcss/tags/1.7.1/includes/modules/unused-css/UnusedCSS_Admin.php#L70
CVE ID: CVE-2023-1473 State: PUBLISHED Published: 2023-04-17T12:17:48.829Z Last Updated: 2025-02-06T15:23:59.862Z Vendors: Unknown Products: Slider, Gallery, and Carousel by MetaSlider Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a6e6c67b-7d9b-4fdb-8115-c33add7bfc3d
CVE ID: CVE-2023-1474 State: PUBLISHED Published: 2023-03-17T14:39:53.522Z Last Updated: 2025-02-26T19:12:43.043Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Automatic Question Paper Generator System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/question_papers/manage_question_paper.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The ident
injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223336. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223336 - https://vuldb.com/?ctiid.223336 - https://github.com/19FF/bug_report/blob/main/SQLi.md
CVE ID: CVE-2023-1475 State: PUBLISHED Published: 2023-03-17T14:42:05.637Z Last Updated: 2024-08-02T05:49:11.594Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Canteen Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0. This issue affects the function query of the file createuser.php. The manipulation of the argument uemail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223337 was assigned to this vulnerability. Additional Analyst Notes: - CVE
e public and may be used. The identifier VDB-223337 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223337 - https://vuldb.com/?ctiid.223337 - https://blog.csdn.net/weixin_43864034/article/details/129623847
CVE ID: CVE-2023-1476 State: PUBLISHED Published: 2023-11-03T08:07:00.493Z Last Updated: 2025-02-27T20:34:44.630Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8 Problem Types: CWE-416 Description: A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:1659 - https://
CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:1659 - https://access.redhat.com/security/cve/CVE-2023-1476 - https://bugzilla.redhat.com/show_bug.cgi?id=2176035 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2
CVE ID: CVE-2023-1477 State: PUBLISHED Published: 2023-04-28T14:56:02.126Z Last Updated: 2025-03-05T19:03:40.886Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: HYPR Products: Keycloak Authenticator Extension Problem Types: CWE-287 Description: Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hypr.com/security-advisories
CVE ID: CVE-2023-1478 State: PUBLISHED Published: 2023-04-10T13:17:59.068Z Last Updated: 2025-02-11T15:11:18.747Z Vendors: Unknown Products: Hummingbird Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/512a9ba4-01c0-4614-a991-efdc7fe51abe
CVE ID: CVE-2023-1479 State: PUBLISHED Published: 2023-03-18T08:25:39.933Z Last Updated: 2024-08-02T05:49:11.414Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Music Player Problem Types: CWE-434 Description: A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file save_music.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223362 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Contai
may be used. VDB-223362 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223362 - https://vuldb.com/?ctiid.223362 - https://github.com/xyaly163/bug_report/blob/main/UPLOAD.md
CVE ID: CVE-2023-1480 State: PUBLISHED Published: 2023-03-18T09:00:05.604Z Last Updated: 2024-08-02T05:49:11.439Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Monitoring of Students Cyber Accounts System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identif
he attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223363. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223363 - https://vuldb.com/?ctiid.223363 - https://github.com/xyaly163/bug_report/blob/main/SQLi-1.md