deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-66422
Published: 2025-11-30
Description: Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-402
References: https://discuss.tryton.org/t/security-release-for-issue-14354/8950; https://foss.heptapod.net/tryton/tryton/-/issues/14354
CVE: CVE-2025-66423
Published: 2025-11-30
Description: Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVSS Score: 7.1 (HIGH)
CWE: CWE-863
References: https://discuss.tryton.org/t/security-release-for-issue-14364/8952; https://foss.heptapod.net/tryton/tryton/-/issues/14364
CVE: CVE-2025-66424
Published: 2025-11-30
Description: Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://discuss.tryton.org/t/security-release-for-issue-14366/8953; https://foss.heptapod.net/tryton/tryton/-/issues/14366
CVE: CVE-2025-13782
Published: 2025-11-30
Description: A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Affected by this issue is the function delete of the file application/Admin/Controller/SlideController.class.php of the component SlideController. The manipulation of the argument ids leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.333786; https://vuldb.com/?id.333786; https://vuldb.com/?submit.688837
CVE: CVE-2025-66432
Published: 2025-11-30
Description: In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-420
References: https://docs.oxide.computer/security/advisories/20251117-1; https://github.com/oxidecomputer/omicron/compare/01bb875...ec069f0; https://oxide.computer/
CVE: CVE-2025-66433
Published: 2025-11-30
Description: HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-863
References: https://htcondor.org/security/vulnerabilities/HTCONDOR-2025-0002.html
CVE: CVE-2025-13783
Published: 2025-11-30
Description: A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. This affects the function check/uncheck/delete of the file application/Comment/Controller/CommentadminController.class.php of the component CommentadminController. The manipulation of the argument ids results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.333787; https://vuldb.com/?id.333787; https://vuldb.com/?submit.688838
CVE: CVE-2025-13784
Published: 2025-11-30
Description: A weakness has been identified in yungifez Skuul School Management System up to 2.6.5. This vulnerability affects unknown code of the file /dashboard/schools/1/edit of the component SVG File Handler. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://gist.github.com/thezeekhan/7fc54fd44bc5f318be0350b367b2d8ff; https://vuldb.com/?ctiid.333788; https://vuldb.com/?id.333788
CVE: CVE-2025-13785
Published: 2025-11-30
Description: A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://gist.github.com/thezeekhan/02f[PII_REDACTED]849fc732eea07008634; https://vuldb.com/?ctiid.333789; https://vuldb.com/?id.333789
CVE: CVE-2025-13786
Published: 2025-11-30
Description: A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-94, CWE-94
References: https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md; https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md#3-proof-of-concept-poc; https://vuldb.com/?ctiid.333790
CVE: CVE-2025-13787
Published: 2025-11-30
Description: A flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the component File Handler. Executing manipulation of the argument fileID can lead to improper privilege management. It is possible to launch the attack remotely. Upgrading to version 21.7.7 is sufficient to fix this issue. You should upgrade the affected component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-266, CWE-269
References: https://github.com/ez-lbz/ez-lbz.github.io/issues/1; https://github.com/ez-lbz/ez-lbz.github.io/issues/1#issuecomment[PII_REDACTED]; https://vuldb.com/?ctiid.333791
CVE: CVE-2025-13788
Published: 2025-11-30
Description: A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Bellingham-max/CVE/issues/1; https://vuldb.com/?ctiid.333792; https://vuldb.com/?id.333792
CVE: CVE-2025-13789
Published: 2025-11-30
Description: A vulnerability was found in ZenTao up to 21.7.6-8564. This affects the function makeRequest of the file module/ai/model.php. The manipulation of the argument Base results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. Upgrading to version 21.7.6 mitigates this issue. It is suggested to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/ez-lbz/ez-lbz.github.io/issues/2; https://github.com/ez-lbz/ez-lbz.github.io/issues/2#issue[PII_REDACTED]; https://github.com/ez-lbz/ez-lbz.github.io/issues/2#issuecomment[PII_REDACTED]
CVE: CVE-2025-13790
Published: 2025-11-30
Description: A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-CSRF-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-CSRF-1/report.md#proof-of-concept; https://vuldb.com/?ctiid.333794
CVE: CVE-2025-13791
Published: 2025-11-30
Description: A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md#proof-of-concept; https://vuldb.com/?ctiid.333795
CVE: CVE-2025-13792
Published: 2025-11-30
Description: A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing a manipulation of the argument passageiros results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. Upgrading to version 8.20.105 and 8.24.98 addresses this issue. Upgrading the affected component is advised.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-94
References: https://vuldb.com/?ctiid.333796; https://vuldb.com/?id.333796; https://vuldb.com/?submit.691251
CVE: CVE-2025-13793
Published: 2025-11-30
Description: A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe[PII_REDACTED]138b1b2e. Affected by this issue is some unknown functionality of the file /includes/header_menu.php of the component GET Parameter Handler. Executing manipulation of the argument Error can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: https://github.com/dream357/report/blob/main/ecommerce-website.docx; https://vuldb.com/?ctiid.333797; https://vuldb.com/?id.333797
CVE: CVE-2025-35028
Published: 2025-11-30
Description: By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal privilege; typically, this is root. There is no attempt to sanitize these arguments in the default configuration of this MCP server at the affected version (as of commit 2f3a5512 in September of 2025).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://github.com/0x4m4/hexstrike-ai/issues/115; https://takeonme.org/gcves/GCVE-1337-2[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]11
CVE: CVE-2025-13795
Published: 2025-11-30
Description: A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01. Affected is an unknown function of the file /student-view.php of the component Edit Student Info Page. This manipulation of the argument First Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/Al1ce258/MY-CVE-REPORTS/blob/main/school-management-system.md; https://vuldb.com/?ctiid.333806; https://vuldb.com/?id.333806
CVE: CVE-2025-13796
Published: 2025-12-01
Description: A security vulnerability has been detected in deco-cx apps up to 0.120.1. Affected by this vulnerability is the function AnalyticsScript of the file website/loaders/analyticsScript.ts of the component Parameter Handler. Such manipulation of the argument url leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.120.2 addresses this issue. It is suggested to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/deco-cx/apps/pull/1360; https://github.com/deco-cx/apps/releases/tag/0.120.2; https://vuldb.com/?ctiid.333807
CVE: CVE-2025-13797
Published: 2025-12-01
Description: A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send_order.cgi. Performing manipulation of the argument del_swifimac results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77, CWE-77
References: https://vuldb.com/?ctiid.333808; https://vuldb.com/?id.333808; https://vuldb.com/?submit.691838
CVE: CVE-2025-13798
Published: 2025-12-01
Description: A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. This affects the function ap_macfilter_add of the file /send_order.cgi. Executing manipulation of the argument mac can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77, CWE-77
References: https://vuldb.com/?ctiid.333809; https://vuldb.com/?id.333809; https://vuldb.com/?submit.691841
CVE: CVE-2025-13799
Published: 2025-12-01
Description: A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77, CWE-77
References: https://vuldb.com/?ctiid.333810; https://vuldb.com/?id.333810; https://vuldb.com/?submit.691842
CVE: CVE-2025-64772
Published: 2025-12-01
Description: The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/en/jp/JVN28247549/; https://www.sony.com/electronics/support/others-software/inzone-hub
CVE: CVE-2025-13800
Published: 2025-12-01
Description: A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://vuldb.com/?ctiid.333811; https://vuldb.com/?id.333811; https://vuldb.com/?submit.691942
CVE: CVE-2025-13802
Published: 2025-12-01
Description: A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selected_date causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: https://github.com/dream357/report/blob/main/restaurant-website-report.docx; https://vuldb.com/?ctiid.333812; https://vuldb.com/?id.333812
CVE: CVE-2025-13803
Published: 2025-12-01
Description: A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /mediacrush/paths.py of the component Header Handler. Such manipulation of the argument Host leads to improper neutralization of http headers for scripting syntax. The attack can be launched remotely.
CVSS Score: 7.3 (HIGH)
CWE: CWE-644
References: https://github.com/lakshayyverma/CVE-Discovery/blob/main/mediacrush.md; https://vuldb.com/?ctiid.333813; https://vuldb.com/?id.333813
CVE: CVE-2025-13804
Published: 2025-12-01
Description: A security flaw has been discovered in nutzam NutzBoot up to 2.6.0-SNAPSHOT. The impacted element is an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Ethereum Wallet Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md#vulnerability-details-and-poc; https://vuldb.com/?ctiid.333814
CVE: CVE-2025-13805
Published: 2025-12-01
Description: A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer. Executing a manipulation can lead to deserialization. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been made available to the public and could be used for attacks.
CVSS Score: 3.7 (LOW)
CWE: CWE-20, CWE-502
References: https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-RCE-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-RCE-1/report.md#vulnerability-details-and-poc; https://vuldb.com/?ctiid.333815
CVE: CVE-2025-13806
Published: 2025-12-01
Description: A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation of the argument from/to/wei leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-266, CWE-285, CWE-863
References: https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-UnauthorizedTransfer-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-UnauthorizedTransfer-1/report.md#vulnerability-details-and-poc; https://vuldb.com/?ctiid.333816
CVE: CVE-2025-13807
Published: 2025-12-01
Description: A vulnerability was detected in orionsec orion-ops up to[PII_REDACTED]a3109651bbde07460958a7be249ed1. Affected is the function MachineKeyController of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineKeyController.java of the component API. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md#proof-of-concept; https://vuldb.com/?ctiid.333817
CVE: CVE-2025-13808
Published: 2025-12-01
Description: A flaw has been found in orionsec orion-ops up to[PII_REDACTED]a3109651bbde07460958a7be249ed1. Affected by this vulnerability is the function update of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/UserController.java of the component User Profile Handler. This manipulation of the argument ID causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-266, CWE-285
References: https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-concept; https://vuldb.com/?ctiid.333818
CVE: CVE-2025-13809
Published: 2025-12-01
Description: A vulnerability has been found in orionsec orion-ops up to[PII_REDACTED]a3109651bbde07460958a7be249ed1. Affected by this issue is some unknown functionality of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineInfoController.java of the component SSH Connection Handler. Such manipulation of the argument host/sshPort/username/password/authType leads to server-side request forgery. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. A patch should be applied to remediate this issue. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md#proof-of-concept; https://vuldb.com/?ctiid.333819
CVE: CVE-2025-13810
Published: 2025-12-01
Description: A vulnerability was found in jsnjfz WebStack-Guns 1.0. This affects the function renderPicture of the file src/main/java/com/jsnjfz/manage/modular/system/controller/KaptchaController.java. Performing a manipulation results in path traversal. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-PathTraversal-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-PathTraversal-1/report.md#proof-of-concept; https://vuldb.com/?ctiid.333820
CVE: CVE-2025-13811
Published: 2025-12-01
Description: A vulnerability was determined in jsnjfz WebStack-Guns 1.0. This vulnerability affects unknown code of the file src/main/java/com/jsnjfz/manage/core/common/constant/factory/PageFactory.java. Executing a manipulation of the argument sort can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-SQLInjection-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-SQLInjection-1/report.md#proof-of-concept; https://vuldb.com/?ctiid.333821