deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-43655
Published: 2023-09-29
Description: Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` enabled in php.ini. Versions 2.6.4, 2.2.22 and 1.10.27 patch this vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this is not best practice.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://github.com/composer/composer/commit/4fce14795aba98e40b6c4f5047305aba17a6120d; https://github.com/composer/composer/commit/955a48e6319c8962e5cd421b07c00ab3c728968c; https://github.com/composer/composer/commit/95e091c921037b7b[PII_REDACTED]e7b738f6b95c9c
CVE: CVE-2023-5283
Published: 2023-09-29
Description: A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teacher_signup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240911.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/llixixi/Engineers-Online-Portal-System/blob/main/Engineers%20Online%20Portal%20System%20teacher_signup.php%20%20has%20Sqlinjection.pdf; https://vuldb.com/?ctiid.240911; https://vuldb.com/?id.240911
CVE: CVE-2023-5284
Published: 2023-09-29
Description: A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file upload_save_student.php. The manipulation of the argument uploaded_file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240912.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/llixixi/Engineers-Online-Portal-System/blob/main/Engineers%20Online%20Portal%20System%20upload_save_student.php%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf; https://vuldb.com/?ctiid.240912; https://vuldb.com/?id.240912
CVE: CVE-2023-5285
Published: 2023-09-29
Description: A vulnerability classified as critical was found in Tongda OA 2017. Affected by this vulnerability is an unknown functionality of the file general/hr/recruit/recruitment/delete.php. The manipulation of the argument RECRUITMENT_ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-240913 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/OliverWu23/cve/blob/main/sql.md; https://vuldb.com/?ctiid.240913; https://vuldb.com/?id.240913
CVE: CVE-2023-5286
Published: 2023-09-29
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file add_category.php of the component Category Handler. The manipulation of the argument category_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-240914 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/xcodeOn1/XSS-Stored-Expense-Tracker-App; https://vuldb.com/?ctiid.240914; https://vuldb.com/?id.240914
CVE: CVE-2022-35908
Published: 2023-09-29
Description: Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://community.cambiumnetworks.com/t/enterprise-wi-fi-system-software-release-6-4-2/87229; https://www.cambiumnetworks.com/support/security/; https://community.cambiumnetworks.com/t/enterprise-wi-fi-system-software-release-6-4-2/87229
CVE: CVE-2023-5287
Published: 2023-09-29
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in BEECMS 4.0. This affects an unknown part of the file /admin/admin_content_tag.php?action=save_content. The manipulation of the argument tag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240915. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/zhenjiaqi/CVE/issues/1; https://vuldb.com/?ctiid.240915; https://vuldb.com/?id.240915
CVE: CVE-2023-5293
Published: 2023-09-29
Description: A vulnerability, which was classified as critical, was found in ECshop 4.1.5. Affected is an unknown function of the file /admin/leancloud.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240924.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/xhcccan/code/issues/1; https://vuldb.com/?ctiid.240924; https://vuldb.com/?id.240924
CVE: CVE-2023-44270
Published: 2023-09-29
Description: An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: https://github.com/github/advisory-database/issues/2820; https://github.com/postcss/postcss/blob/main/lib/tokenize.js#L25; https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5
CVE: CVE-2023-5294
Published: 2023-09-29
Description: A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goods_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240925 was assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/xhcccan/code/issues/2; https://vuldb.com/?ctiid.240925; https://vuldb.com/?id.240925
CVE: CVE-2023-5296
Published: 2023-09-29
Description: A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Affected by this issue is some unknown functionality of the file api.php?m=reimplat&a=index of the component Password Handler. The manipulation leads to weak password recovery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-240926 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-640
References: https://github.com/magicwave18/vuldb/issues/1; https://vuldb.com/?ctiid.240926; https://vuldb.com/?id.240926
CVE: CVE-2023-5297
Published: 2023-09-29
Description: A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240927.
CVSS Score: 3.7 (LOW)
CWE: CWE-530, CWE-552
References: https://github.com/magicwave18/vuldb/issues/2; https://vuldb.com/?ctiid.240927; https://vuldb.com/?id.240927
CVE: CVE-2023-5227
Published: 2023-09-30
Description: Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/thorsten/phpmyfaq/commit/abf52487422ce47195c8a80bd904a7af39f60297; https://huntr.dev/bounties/a335c013-db75-4120-872c-42059c7100e8; https://github.com/thorsten/phpmyfaq/commit/abf52487422ce47195c8a80bd904a7af39f60297
CVE: CVE-2023-5316
Published: 2023-09-30
Description: Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/332d2e4a83251d406ca58dd11c27c598673aa5fa; https://huntr.dev/bounties/f877e65a-e647-457b-b105-7e5c9f58fb43; https://github.com/thorsten/phpmyfaq/commit/332d2e4a83251d406ca58dd11c27c598673aa5fa
CVE: CVE-2023-5317
Published: 2023-09-30
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/ec551bdf1566ede1e55f289888c446f877ad9a83; https://huntr.dev/bounties/5e146e7c-60c7-498b-9ffe-fd4cb4ca8c54; https://github.com/thorsten/phpmyfaq/commit/ec551bdf1566ede1e55f289888c446f877ad9a83
CVE: CVE-2023-5318
Published: 2023-09-30
Description: Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798, CWE-798
References: https://github.com/microweber/microweber/commit/c48b34dfd6cae7a55b452280d692dc62512574b0; https://huntr.dev/bounties/17826bdd-8136-48ae-afb9-af627cb6fd5d; https://github.com/microweber/microweber/commit/c48b34dfd6cae7a55b452280d692dc62512574b0
CVE: CVE-2023-5319
Published: 2023-09-30
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/95ed9b20557ed930d4eed1f3a6db713416f31131; https://huntr.dev/bounties/e2542cbe-41ab-4a90-b6a4-191884c1834d; https://github.com/thorsten/phpmyfaq/commit/95ed9b20557ed930d4eed1f3a6db713416f31131
CVE: CVE-2023-5320
Published: 2023-09-30
Description: Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/e[PII_REDACTED]9772adcdab4f36c837faa27490346; https://huntr.dev/bounties/3a2bc18b-5932-4fb5-a01e-24b2b0443b67; https://github.com/thorsten/phpmyfaq/commit/e[PII_REDACTED]9772adcdab4f36c837faa27490346
CVE: CVE-2023-43702
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "tracking_number" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43703
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "product_info[][name]" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43704
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "title" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43705
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "translation_value[1]" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43706
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "email_templates_key" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43707
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm[1][name]
" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43708
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "configuration_title[1](MODULE_PAYMENT_SAGE_PAY_SERVER_TEXT_TITLE)" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43709
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "configuration_title[1](MODULE)" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43710
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "configuration_title[1][MODULE_SHIPPING_PERCENT_TEXT_TITLE]" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-43711
Published: 2023-09-30
Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "admin_firstname" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/bts/; https://www.oscommerce.com/; https://fluidattacks.com/advisories/bts/
CVE: CVE-2023-5201
Published: 2023-09-30
Description: The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the [php] shortcode setting to be enabled on the vulnerable site.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/thesis-openhook/tags/4.3.0/inc/shortcodes.php#L28; https://plugins.trac.wordpress.org/browser/thesis-openhook/tags/4.3.1/inc/shortcodes.php?rev=2972840#L24; https://www.wordfence.com/threat-intel/vulnerabilities/id/37b9ed0e-5af2-47c1-b2da-8d103e4c31bf?source=cve
CVE: CVE-2023-5295
Published: 2023-09-30
Description: The Comments by Startbit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vivafbcomment' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/facebook-comment-by-vivacity/tags/1.4/user-file.php#L172; https://www.wordfence.com/threat-intel/vulnerabilities/id/602b3b9c-76a7-4b0b-8aad-e554c2fd6910?source=cve; https://plugins.trac.wordpress.org/browser/facebook-comment-by-vivacity/tags/1.4/user-file.php#L172
CVE: CVE-2023-5298
Published: 2023-09-30
Description: A vulnerability was found in Tongda OA 2017. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/hr/recruit/requirements/delete.php. The manipulation of the argument REQUIREMENTS_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. VDB-240938 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/szh0105/cve/blob/main/sql.md; https://vuldb.com/?ctiid.240938; https://vuldb.com/?id.240938
CVE: CVE-2023-5207
Published: 2023-09-30
Description: A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.
CVSS Score: 8.2 (HIGH)
CWE: CWE-250
References: https://gitlab.com/gitlab-org/gitlab/-/issues/425604; https://gitlab.com/gitlab-org/gitlab/-/issues/425857; https://hackerone.com/reports/2174141
CVE: CVE-2023-5300
Published: 2023-09-30
Description: A vulnerability classified as critical has been found in TTSPlanning up to 20230925. This affects an unknown part. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240939.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/TTSPlanning/TTSPlanning.md; https://vuldb.com/?ctiid.240939; https://vuldb.com/?id.240939
CVE: CVE-2023-5301
Published: 2023-09-30
Description: A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240940.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-78
References: https://github.com/Lamber-maybe/cve/blob/main/DedeCMS%20V5.7.111%20Remote%20Code%20Execution%20Vulnerability.md; https://vuldb.com/?ctiid.240940; https://vuldb.com/?id.240940
CVE: CVE-2023-5302
Published: 2023-09-30
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affects some unknown processing of the component Manage Account Page. The manipulation of the argument First Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240941 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/rohit0x5/poc/blob/main/cve_2; https://vuldb.com/?ctiid.240941; https://vuldb.com/?id.240941
CVE: CVE-2023-5303
Published: 2023-09-30
Description: A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking-detail.php of the component Account Detail Handler. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. VDB-240942 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.240942; https://vuldb.com/?id.240942; https://vuldb.com/?ctiid.240942
CVE: CVE-2023-5321
Published: 2023-09-30
Description: Missing Authorization in GitHub repository hamza417/inure prior to build94.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29b; https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a; https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29b
CVE: CVE-2023-5304
Published: 2023-09-30
Description: A vulnerability has been found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /book-services.php of the component Service Booking. The manipulation of the argument message leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-240943.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.240943; https://vuldb.com/?id.240943; https://vuldb.com/?ctiid.240943
CVE: CVE-2023-5305
Published: 2023-09-30
Description: A vulnerability was found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /mail.php of the component Contact Us Page. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-240944.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.240944; https://vuldb.com/?id.240944; https://vuldb.com/?ctiid.240944
CVE: CVE-2023-5313
Published: 2023-09-30
Description: A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240949 was assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-837, CWE-362
References: https://github.com/tht1997/WhiteBox/blob/main/PHPKOBO/ajax_pool_script.md; https://vuldb.com/?ctiid.240949; https://vuldb.com/?id.240949
CVE: CVE-2022-4956
Published: 2023-09-30
Description: A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 19.7.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-240903.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://heegong.github.io/posts/Advaned-Installer-Local-Privilege-Escalation-Vulnerability/; https://vuldb.com/?ctiid.240903; https://vuldb.com/?id.240903