deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-2643
Published: 2023-05-11
Description: A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/update_password.php of the component POST Parameter Handler. The manipulation of the argument new_password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228772.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/GZRsecurity/cve/blob/main/SQLi.md; https://vuldb.com/?ctiid.228772; https://vuldb.com/?id.228772
CVE: CVE-2023-2644
Published: 2023-05-11
Description: A vulnerability, which was classified as problematic, has been found in DigitalPersona FPSensor 1.0.0.1. This issue affects some unknown processing of the file C:\Program Files (x86)\FPSensor\bin\DpHost.exe. The manipulation leads to unquoted search path. Attacking locally is a requirement. The identifier VDB-228773 was assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-428, CWE-428
References: https://vuldb.com/?ctiid.228773; https://vuldb.com/?id.228773; https://vuldb.com/?ctiid.228773
CVE: CVE-2023-2645
Published: 2023-05-11
Description: A vulnerability, which was classified as critical, was found in USR USR-G806 1.0.41. Affected is an unknown function of the component Web Management Page. The manipulation of the argument username/password with the input root leads to use of hard-coded password. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. VDB-228774 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259
References: https://github.com/wswokao/testrouter/blob/main/README.md; https://vuldb.com/?ctiid.228774; https://vuldb.com/?id.228774
CVE: CVE-2023-2646
Published: 2023-05-11
Description: A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component GET Request Parameter Handler. The manipulation leads to denial of service. The attack can only be done within the local network. The associated identifier of this vulnerability is VDB-228775. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-404, CWE-404
References: https://vuldb.com/?ctiid.228775; https://vuldb.com/?id.228775; https://vuldb.com/?ctiid.228775
CVE: CVE-2023-2647
Published: 2023-05-11
Description: A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroot/inc/utility_all.php of the component File Upload Handler. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228776. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/sunyixuan1228/cve/blob/main/weaver%20exec.md; https://vuldb.com/?ctiid.228776; https://vuldb.com/?id.228776
CVE: CVE-2023-2648
Published: 2023-05-11
Description: A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228777 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/sunyixuan1228/cve/blob/main/weaver.md; https://vuldb.com/?ctiid.228777; https://vuldb.com/?id.228777
CVE: CVE-2023-2649
Published: 2023-05-11
Description: A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The manipulation of the argument v2 leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228778 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://github.com/xinzhihen06/ac23tenda/blob/main/tendaAC23.md; https://vuldb.com/?ctiid.228778; https://vuldb.com/?id.228778
CVE: CVE-2023-2652
Published: 2023-05-11
Description: A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file /classes/Master.php?f=delete_item. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228780.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Lost-and-Found-Information-System---Multiple-SQL-injections.md#2classesmasterphpfdelete_item; https://vuldb.com/?ctiid.228780; https://vuldb.com/?id.228780
CVE: CVE-2023-2653
Published: 2023-05-11
Description: A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by this vulnerability is an unknown functionality of the file items/index.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228781 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Lost-and-Found-Information-System---Multiple-SQL-injections.md; https://vuldb.com/?ctiid.228781; https://vuldb.com/?id.228781
CVE: CVE-2023-2490
Published: 2023-05-11
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fernando Briano UserAgent-Spy plugin <= 1.3.1 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/useragent-spy/wordpress-useragent-spy-plugin-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/useragent-spy/wordpress-useragent-spy-plugin-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-30256
Published: 2023-05-11
Description: Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/172542/Webkul-Qloapps-1.5.2-Cross-Site-Scripting.html; https://github.com/ahrixia/CVE-2023-30256; https://github.com/webkul/hotelcommerce
CVE: CVE-2023-31473
Published: 2023-05-11
Description: An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to read an arbitrary file name while using root privileges. The -f option can be used with a configuration file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Read.md; https://www.gl-inet.com; https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Read.md
CVE: CVE-2023-31475
Published: 2023-05-11
Description: An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/gl-inet/CVE-issues/blob/main/3.215/Buffer_Overflow.md; https://justinapplegate.me/2023/glinet-CVE-2023-31475/; https://www.gl-inet.com
CVE: CVE-2023-31498
Published: 2023-05-11
Description: A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitive information via the session token parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384, CWE-384
References: https://gist.github.com/captain-noob/aff11542477ddd0a92ad8b94ec75f832; https://github.com/captain-noob; https://twitter.com/captain__noob
CVE: CVE-2021-34076
Published: 2023-05-11
Description: File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/HolaAsuka/CVE/issues/1; https://github.com/HolaAsuka/CVE/issues/1
CVE: CVE-2023-31445
Published: 2023-05-11
Description: Cassia Access controller before 2.1.[PII_REDACTED], was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have the ability to enumerate all other users and discover e-mail addresses, phone numbers, and privileges of all other users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://blog.kscsc.online/cves/202331445/md.html; https://github.com/Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure; https://www.cassianetworks.com
CVE: CVE-2023-0851
Published: 2023-05-11
Description: Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-0852
Published: 2023-05-11
Description: Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-0853
Published: 2023-05-11
Description: Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-0854
Published: 2023-05-11
Description: Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-0855
Published: 2023-05-11
Description: Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-0856
Published: 2023-05-11
Description: Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-0857
Published: 2023-05-11
Description: Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-286
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-0858
Published: 2023-05-11
Description: Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 3.1 (LOW)
CWE: CWE-284, CWE-287
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-0859
Published: 2023-05-11
Description: Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
CVSS Score: 2.2 (LOW)
CWE: CWE-1285
References: https://canon.jp/support/support-info/230414vulnerability-response; https://psirt.canon/advisory-information/cp2023-001/; https://www.canon-europe.com/support/product-security-latest-news/
CVE: CVE-2023-29863
Published: 2023-05-11
Description: Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://medical.com; http://weblab.com; https://medium.com/%40waadalbyalii5/sql-injection-in-wsdl-file-c66fa00042f5
CVE: CVE-2023-2656
Published: 2023-05-11
Description: A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file /classes/Master.php?f=delete_service. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-228798 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/AC-Repair-and-Services-System---SQL-injections.md; https://vuldb.com/?ctiid.228798; https://vuldb.com/?id.228798
CVE: CVE-2022-47129
Published: 2023-05-11
Description: PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/Omoredream/43f60004665e9d9d8c71f7e976261387; https://www.yuque.com/g/alipayyz9csdbcdz/zytgq2/vz8ktghkcgvhsdzn/collaborator/join?token=R5phxzuV3w99ndZD; https://gist.github.com/Omoredream/43f60004665e9d9d8c71f7e976261387
CVE: CVE-2023-2657
Published: 2023-05-11
Description: A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228799.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#1xss-vulnerability-in-productsphp; https://vuldb.com/?ctiid.228799; https://vuldb.com/?id.228799
CVE: CVE-2023-2658
Published: 2023-05-11
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228800.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#2sql-injection-vulnerability-in-productsphp; https://vuldb.com/?ctiid.228800; https://vuldb.com/?id.228800
CVE: CVE-2023-22720
Published: 2023-05-11
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robert Macchi WP Links Page plugin <= 4.9.3 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-links-page/wordpress-wp-links-page-plugin-4-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-links-page/wordpress-wp-links-page-plugin-4-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-2659
Published: 2023-05-11
Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file view_product.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228801 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#3sql-injection-vulnerability-in-view_productphp; https://vuldb.com/?ctiid.228801; https://vuldb.com/?id.228801
CVE: CVE-2023-2660
Published: 2023-05-11
Description: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_categories.php. The manipulation of the argument c leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228802 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-79
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#4sql-injection-vulnerability-in-view_categoriesphp; https://vuldb.com/?ctiid.228802; https://vuldb.com/?id.228802
CVE: CVE-2023-2661
Published: 2023-05-11
Description: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228803.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#5sql-injection-vulnerability-in-classesmasterphp; https://vuldb.com/?ctiid.228803; https://vuldb.com/?id.228803