Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41507 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-30T19:17:42.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://superstorefinder.net/support/forums/topic/super-store-finder-patch-notes/ - https://github.com/redblueteam/CVE-2023-41507/
CVE ID: CVE-2023-41508 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-26T20:50:45.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://superstorefinder.net/support/forums/topic/super-store-finder-patch-notes/ - https://github.com/redblueteam/CVE-2023-41508/
CVE ID: CVE-2023-41519 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:36:49.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Attendance Management System v1 was discovered to contain a cross-site scripting (XSS) vulnerability via the sessionName parameter at createSessionTerm.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rickxy/Student-Attendance-Management-System - https://gist.github.com/celbahraoui/412085648b1e8131aee9456e15177524
CVE ID: CVE-2023-41520 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:04:10.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rickxy/Student-Attendance-Management-System - https://gist.github.com/celbahraoui/39c19c0b7f9f92a1a7e06d1c928bb1c3
CVE ID: CVE-2023-41521 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:10:20.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rickxy/Student-Attendance-Management-System - https://gist.github.com/celbahraoui/4300aa8eb79e99f2c481cfb3a49a0cd9
CVE ID: CVE-2023-41522 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T15:37:58.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rickxy/Student-Attendance-Management-System - https://gist.github.com/celbahraoui/f13884670ac6668ae05b60fd37bb3521
CVE ID: CVE-2023-41523 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T16:10:38.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rickxy/Student-Attendance-Management-System - https://gist.github.com/celbahraoui/b18580d4acf3e4ada6c220c7416469ed
CVE ID: CVE-2023-41524 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T15:40:15.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rickxy/Student-Attendance-Management-System - https://gist.github.com/celbahraoui/b9437dbec7ab539531fe44f0c26b48a2
CVE ID: CVE-2023-41525 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T13:44:31.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System - https://gist.github.com/celbahraoui/ec09b05d4b36fce476458b0ee8140416
CVE ID: CVE-2023-41526 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T13:52:15.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System - https://gist.github.com/celbahraoui/f5343ffba6e99bd0a65bd36d21a679c6
CVE ID: CVE-2023-41527 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T14:11:26.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System - https://gist.github.com/celbahraoui/cbfa4a06cb3cce7222718f8c25519c98
CVE ID: CVE-2023-41528 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T14:12:36.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System - https://gist.github.com/celbahraoui/4f6168774ef31510e3bad5cdeccd131e
CVE ID: CVE-2023-41529 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T19:09:31.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and lname parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System - https://gist.github.com/celbahraoui/f600264c0e82ca2828cf9b8748d04007
CVE ID: CVE-2023-41530 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T14:13:42.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System - https://gist.github.com/celbahraoui/8b9bd172bc637ab791005db0b239ae89
CVE ID: CVE-2023-41531 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T19:17:02.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System - https://gist.github.com/celbahraoui/f3e2c9d9d015aa455949e3d3c4fdade6
CVE ID: CVE-2023-41532 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T19:18:32.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System - https://gist.github.com/celbahraoui/9972727c6770cd63386ebbe07a9c1454
CVE ID: CVE-2023-41537 State: PUBLISHED Published: 2023-08-30T00:00:00.000Z Last Updated: 2025-11-11T17:16:56.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/phpjabbers/2023/Business-Directory-Script-Version-3.2
CVE ID: CVE-2023-41538 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:52:31.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/phpjabbers/2023/PHP-Forum-Script-3.0
CVE ID: CVE-2023-41539 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:51:31.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/phpjabbers/2023/Business-Directory-Script-Version%3A3.2/SQLi
CVE ID: CVE-2023-41542 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-09-03T19:53:32.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pho3n1x-web.github.io/2023/09/15/CVE-2023-41542%28JeecgBoot_sql%29/
CVE ID: CVE-2023-41543 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T19:01:35.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check. Additional Analyst Notes: - CVE Program Container: References: - https://mp.weixin.qq.com/s/q6R-kaN4XS5d_cgWtq46vw - https://pho3n1x-web.github.io/2023/09/18/CVE-2023-41543%28JeecgBoot_sql%29/
CVE ID: CVE-2023-41544 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T19:01:35.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component. Additional Analyst Notes: - CVE Program Container: References: - https://pho3n1x-web.github.io/2023/09/18/CVE-2023-41544%28JeecgBoot_SSTI%29/
CVE ID: CVE-2023-41552 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:49:40.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url /goform/fast_setting_wifi_set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/form_fast_setting_wifi_set/1.md
CVE ID: CVE-2023-41553 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:47:38.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetStaticRouteCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/fromSetRouteStatic/1.md
CVE ID: CVE-2023-41554 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:44:11.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/fromSetWirelessRepeat/1.md
CVE ID: CVE-2023-41555 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:42:23.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security_5g at url /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/formWifiBasicSet/1.md
CVE ID: CVE-2023-41556 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:40:15.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/fromSetIpMacBind/1.md
CVE ID: CVE-2023-41557 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:36:24.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform/addressNat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/fromAddressNat/1.md
CVE ID: CVE-2023-41558 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:34:20.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/fromSetSysTime/1.md
CVE ID: CVE-2023-41559 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:28:01.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/fromNatStaticSetting/1.md
CVE ID: CVE-2023-41560 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:01:34.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/formSetFirewallCfg/1.md
CVE ID: CVE-2023-41561 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:00:27.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/formSetPPTPServer/1.md
CVE ID: CVE-2023-41562 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T18:55:00.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter time at url /goform/PowerSaveSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/setSmartPowerManagement/1.md
CVE ID: CVE-2023-41563 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T18:50:56.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/GetParentControlInfo/1.md
CVE ID: CVE-2023-41564 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:49:47.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LongHair00/Mitre_opensource_report/blob/main/CockpitCMS-StoredXSS.md
CVE ID: CVE-2023-41566 State: PUBLISHED Published: 2025-07-17T00:00:00.000Z Last Updated: 2025-07-24T20:12:21.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend.do. This vulnerability allows attackers to obtain the password of the background administrator and further obtain database permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/night-0p/anh/blob/main/Landray%20OA/FileDownload.md - https://gist.github.com/night-0p/668fc88385d4f60feb90b7fcef8443b1
CVE ID: CVE-2023-41570 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:05:06.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.enricobassetti.it/2023/11/cve-2023-41570-access-control-vulnerability-in-mikrotik-rest-api/
CVE ID: CVE-2023-41575 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:48:47.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/soundarkutty/Stored-xss/blob/main/poc
CVE ID: CVE-2023-41578 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:48:10.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Snakinya/Bugs/issues/1
CVE ID: CVE-2023-41580 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T16:28:18.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-search-result.php. This vulnerability allows attackers to enumerate arbitrary fields in the LDAP server and access sensitive data via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ehtec/phpipam-exploit - https://github.com/phpipam/phpipam/commit/c451085476074943eb4056941005c0b61db566c5
CVE ID: CVE-2023-41588 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-08-02T19:01:35.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the durationFormat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xsn1210/poc2/blob/main/xss%5BTime%20to%20SLA%5D.md - https://github.com/xsn1210/poc2
CVE ID: CVE-2023-41591 State: PUBLISHED Published: 2025-05-29T00:00:00.000Z Last Updated: 2025-05-29T18:21:05.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.onosproject.org/pages/viewpage.action?pageId=16122675 - https://gist.github.com/kjw6855/9764e3f51b89119473e4d2c4f64dca27
CVE ID: CVE-2023-41592 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T18:57:00.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://owasp.org/Top10/A03_2021-Injection/ - https://owasp.org/www-project-top-ten/ - https://hacker.soarescorp.com/cve/2023-41592/
CVE ID: CVE-2023-41593 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:57:14.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute arbitrary web scripts and HTML via a crafted payload injected into the Category and Category Field parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet - https://portswigger.net/web-security/cross-site-scripting - https://www.acunetix.com/websitesecurity/
tion_Cheat_Sheet - https://portswigger.net/web-security/cross-site-scripting - https://www.acunetix.com/websitesecurity/cross-site-scripting/ - https://github.com/MATRIXDEVIL/CVE/blob/main/CVE-2023-41593
CVE ID: CVE-2023-41594 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:46:34.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/sql-injection - https://www.acunetix.com/vulnerabilities/web/sql-injection/ - https://github.com/MATRIXDEVIL/CVE/blob/main/CVE-2023-41594
CVE ID: CVE-2023-41595 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:25:41.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vaxilu/x-ui - http://xui-xray.com - https://github.com/dubin12345/xui-xary/blob/main/README.md