deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20913
Published: 2022-07-22
Description: A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to insufficient input validation in the web-based management interface of Cisco Nexus Dashboard. An attacker with Administrator credentials could exploit this vulnerability by uploading a crafted file. A successful exploit could allow the attacker to overwrite arbitrary files on an affected device.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-23, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-afw-2MT9tb99; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-afw-2MT9tb99
CVE: CVE-2022-20916
Published: 2022-07-22
Description: A vulnerability in the web-based management interface of Cisco IoT Control Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iotcc-xss-WQrCLRVd; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iotcc-xss-WQrCLRVd
CVE: CVE-2022-2493
Published: 2022-07-22
Description: Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1083
References: https://github.com/openemr/openemr/commit/871ae5198d8ca18fd17257ae7c5c906a52dca908; https://huntr.dev/bounties/8a4d54e2-e1cd-47c3-9304-ac8be87c80f1; https://github.com/openemr/openemr/commit/871ae5198d8ca18fd17257ae7c5c906a52dca908
CVE: CVE-2022-2494
Published: 2022-07-22
Description: Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/commit/152e551208e6de534ab194c87e9ffa4d56d294a8; https://huntr.dev/bounties/74ddb017-c1fd-4e72-bd30-3b[PII_REDACTED]; https://github.com/openemr/openemr/commit/152e551208e6de534ab194c87e9ffa4d56d294a8
CVE: CVE-2022-2495
Published: 2022-07-22
Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.21.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/d35e691e72d358430abc8e99f5ba9eb374423b9f; https://huntr.dev/bounties/00affb69-275d-4f4c-b419-437922bc7798; https://github.com/microweber/microweber/commit/d35e691e72d358430abc8e99f5ba9eb374423b9f
CVE: CVE-2022-31162
Published: 2022-07-22
Description: Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret types to reduce the possibility of printing sensitive information in application logs. As a workaround, do not print/output requests and responses for OAuth and client configurations in logs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-1258, CWE-212
References: https://github.com/abdolence/slack-morphism-rust/releases/tag/v0.41.0; https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-99j7-mhfh-w84p; https://github.com/abdolence/slack-morphism-rust/releases/tag/v0.41.0
CVE: CVE-2022-31163
Published: 2022-07-22
Description: TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-23, CWE-22
References: https://github.com/tzinfo/tzinfo/commit/9905ca93abf7bf3e387bd592406e403cd18334c7; https://github.com/tzinfo/tzinfo/commit/9eddbb5c0e682736f61d0dd803b6031a5db9eadf; https://github.com/tzinfo/tzinfo/releases/tag/v0.3.61
CVE: CVE-2022-31164
Published: 2022-07-22
Description: Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version 0.7.51.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/tovyblox/tovy/pull/63; https://github.com/tovyblox/tovy/security/advisories/GHSA-j6f8-wh4v-jc37; https://github.com/tovyblox/tovy/pull/63
CVE: CVE-2022-31169
Published: 2022-07-22
Description: Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only affects the AArch64 platform. Other platforms are not affected. The translation rules for constants did not take into account whether sign or zero-extension should happen which resulted in an incorrect value being placed into a register when a division was encountered. The impact of this bug is that programs executing within the WebAssembly sandbox would not behave according to the WebAssembly specification. This means that it is hypothetically possible for execution within the sandbox to go awry and WebAssembly programs could produce unexpected results. This should not impact hosts executing WebAssembly but does affect the correctness of guest programs. This bug has been patched in Wasmtime version 0.38.2 and cranelift-codegen 0.85.2. There are no known workarounds.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-682
References: https://github.com/bytecodealliance/wasmtime/commit/2ba4bce5cc719e5a74e571a534424614e62ecc41; https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7f6x-jwh5-m9r4; https://github.com/bytecodealliance/wasmtime/commit/2ba4bce5cc719e5a74e571a534424614e62ecc41
CVE: CVE-2022-31170
Published: 2022-07-22
Description: OpenZeppelin Contracts is a library for smart contract development. Versions 4.0.0 until 4.7.1 are vulnerable to ERC165Checker reverting instead of returning `false`. `ERC165Checker.supportsInterface` is designed to always successfully return a boolean, and under no circumstance revert. However, an incorrect assumption about Solidity 0.8's `abi.decode` allows some cases to revert, given a target contract that doesn't implement EIP-165 as expected, specifically if it returns a value other than 0 or 1. The contracts that may be affected are those that use `ERC165Checker` to check for support for an interface and then handle the lack of support in a way other than reverting. The issue was patched in version 4.7.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-252
References: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552; https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-qh9x-gcfh-pcrw; https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552
CVE: CVE-2022-31172
Published: 2022-07-22
Description: OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the SignatureChecker reverting. `SignatureChecker.isValidSignatureNow` is not expected to revert. However, an incorrect assumption about Solidity 0.8's `abi.decode` allows some cases to revert, given a target contract that doesn't implement EIP-1271 as expected. The contracts that may be affected are those that use `SignatureChecker` to check the validity of a signature and handle invalid signatures in a way other than reverting. The issue was patched in version 4.7.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-347
References: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552; https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-4g63-c64m-25w9; https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3552
CVE: CVE-2022-2327
Published: 2022-07-22
Description: io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-415
References: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=df3f3bb5059d20ef094d6b2f0256c4bf4127a859; https://kernel.dance/#df3f3bb5059d20ef094d6b2f0256c4bf4127a859; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-2209
Published: 2022-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-31168
Published: 2022-07-22
Description: Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a member of an organization could craft an API call that grants organization administrator privileges to one of their bots. The vulnerability is fixed in Zulip Server 5.5. Members who don’t own any bots, and lack permission to create them, can’t exploit the vulnerability. As a workaround for the vulnerability, an organization administrator can restrict the `Who can create bots` permission to administrators only, and change the ownership of existing bots.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://github.com/zulip/zulip/commit/751b2a03e565e9eb02ffe923b7c24ac73d604034; https://github.com/zulip/zulip/releases/tag/5.5; https://github.com/zulip/zulip/security/advisories/GHSA-c3cp-ggg5-9xw5
CVE: CVE-2022-36131
Published: 2022-07-22
Description: The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=overview&hosting=server; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-038.txt; https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=overview&hosting=server
CVE: CVE-2021-36200
Published: 2022-07-22
Description: Under certain circumstances an unauthenticated user could access the the web API for Metasys ADS/ADX/OAS 10 versions prior to 10.1.6 and 11 versions prior to 11.0.2 and enumerate users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-02; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-02
CVE: CVE-2022-1655
Published: 2022-07-22
Description: An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://access.redhat.com/security/cve/cve-2022-1655; https://access.redhat.com/security/cve/cve-2022-1655
CVE: CVE-2022-2135
Published: 2022-07-22
Description: The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE: CVE-2022-2136
Published: 2022-07-22
Description: The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE: CVE-2022-2137
Published: 2022-07-22
Description: The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE: CVE-2022-2138
Published: 2022-07-22
Description: The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition.
CVSS Score: 8.2 (HIGH)
CWE: CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE: CVE-2022-2139
Published: 2022-07-22
Description: The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE: CVE-2022-2142
Published: 2022-07-22
Description: The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
CVE: CVE-2022-2143
Published: 2022-07-22
Description: The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://packetstormsecurity.com/files/168108/Advantech-iView-NetworkServlet-Command-Injection.html; https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03; http://packetstormsecurity.com/files/168108/Advantech-iView-NetworkServlet-Command-Injection.html
CVE: CVE-2022-2470
Published: 2022-07-22
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/d[PII_REDACTED]0b833abb20ccd55e1628f16ff65e4; https://huntr.dev/bounties/3f1f679c-c243-431c-8ed0-e61543b9921b; https://github.com/microweber/microweber/commit/d[PII_REDACTED]0b833abb20ccd55e1628f16ff65e4
CVE: CVE-2022-34037
Published: 2022-07-22
Description: An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via a crafted URI. Note: This has been disputed as a bug, not a security vulnerability, in the Caddy web server that emerged when an administrator's bad configuration containing a malformed request URI caused the server to return an empty reply instead of a valid HTTP response to the client.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/caddyserver/caddy/issues/4775; https://github.com/caddyserver/caddy/issues/4775#issuecomment[PII_REDACTED]; https://github.com/caddyserver/caddy/issues/4775
CVE: CVE-2022-34500
Published: 2022-07-22
Description: The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/Gmiller290488/bin_collection/issues/1; https://pypi.org/project/bin-collect/
CVE: CVE-2022-34501
Published: 2022-07-22
Description: The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/Gmiller290488/bin_collection/issues/2; https://pypi.org/project/bin-collection/
CVE: CVE-2022-34502
Published: 2022-07-22
Description: Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/radareorg/radare2/issues/20336; https://github.com/radareorg/radare2/issues/20336
CVE: CVE-2022-34503
Published: 2022-07-22
Description: QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/qpdf/qpdf/issues/701; https://github.com/qpdf/qpdf/issues/701
CVE: CVE-2022-34509
Published: 2022-07-22
Description: The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/tford9/Wiki-Faces-Downloader/issues/1; https://pypi.org/project/wikifaces/
CVE: CVE-2022-34520
Published: 2022-07-22
Description: Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/radareorg/radare2/issues/20354; https://github.com/radareorg/radare2/issues/20354
CVE: CVE-2022-34981
Published: 2022-07-22
Description: The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/UPB-SS1/PyCrowdTangle/issues/1; https://pypi.org/project/PyCrowdTangle/
CVE: CVE-2022-34982
Published: 2022-07-22
Description: The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/alexw994/eziod/issues/1; https://pypi.org/project/eziod/
CVE: CVE-2022-34983
Published: 2022-07-22
Description: The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/SunnyHaze/SCU-Captcha/issues/1; https://pypi.org/project/scu-captcha/
CVE: CVE-2020-14114
Published: 2022-07-22
Description: information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=277; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=277
CVE: CVE-2020-14126
Published: 2022-07-22
Description: Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278
CVE: CVE-2022-28878
Published: 2022-07-22
Description: A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine.
CVSS Score: 4.3 (MEDIUM)
References: https://www.f-secure.com/en/business/support-and-downloads/security-advisories; https://www.withsecure.com/en/support/security-advisories; https://www.f-secure.com/en/business/support-and-downloads/security-advisories
CVE: CVE-2022-28879
Published: 2022-07-22
Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine.
CVSS Score: 4.3 (MEDIUM)
References: https://www.f-secure.com/en/business/support-and-downloads/security-advisories; https://www.withsecure.com/en/support/security-advisories; https://www.f-secure.com/en/business/support-and-downloads/security-advisories
CVE: CVE-2022-2510
Published: 2022-07-22
Description: Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML (XSS) on page "Special:SearchCenter", using the search term in the URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-01; https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-01
CVE: CVE-2022-2511
Published: 2022-07-22
Description: Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-02; https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-02
CVE: CVE-2017-20139
Published: 2022-07-22
Description: A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /show_news.php. The manipulation of the argument id with the input AND (SELECT 1222 FROM(SELECT COUNT(*),CONCAT(0x71786b7a71,(SELECT (ELT(1222=1222,1))),0x717a627871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) leads to sql injection (Error). The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?id.96253; https://www.exploit-db.com/exploits/41155/; https://vuldb.com/?id.96253
CVE: CVE-2017-20140
Published: 2022-07-22
Description: A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input <img src=i onerror=prompt(1)> leads to basic cross site scripting (Reflected). The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-80
References: https://vuldb.com/?id.96254; https://www.exploit-db.com/exploits/41155/; https://vuldb.com/?id.96254