deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-48390
Published: 2023-06-06
Description: In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48391
Published: 2023-06-06
Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48392
Published: 2023-06-06
Description: In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48438
Published: 2023-06-06
Description: In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48439
Published: 2023-06-06
Description: In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48440
Published: 2023-06-06
Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-770
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48441
Published: 2023-06-06
Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-770
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48442
Published: 2023-06-06
Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-476
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48443
Published: 2023-06-06
Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-476
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48444
Published: 2023-06-06
Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-476
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48445
Published: 2023-06-06
Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-476
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48446
Published: 2023-06-06
Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48447
Published: 2023-06-06
Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-48448
Published: 2023-06-06
Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2023-30863
Published: 2023-06-06
Description: In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2023-30864
Published: 2023-06-06
Description: In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2023-30865
Published: 2023-06-06
Description: In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2023-30866
Published: 2023-06-06
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2023-30914
Published: 2023-06-06
Description: In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2023-30915
Published: 2023-06-06
Description: In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]14762498
CVE: CVE-2022-22060
Published: 2023-06-06
Description: Assertion occurs while processing Reconfiguration message due to improper validation
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-22076
Published: 2023-06-06
Description: information disclosure due to cryptographic issue in Core during RPMB read request.
CVSS Score: 7.1 (HIGH)
CWE: CWE-310
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33224
Published: 2023-06-06
Description: Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33226
Published: 2023-06-06
Description: Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33227
Published: 2023-06-06
Description: Memory corruption in Linux android due to double free while calling unregister provider after register call.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33230
Published: 2023-06-06
Description: Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33240
Published: 2023-06-06
Description: Memory corruption in Audio due to incorrect type cast during audio use-cases.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-704, CWE-704
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33251
Published: 2023-06-06
Description: Transient DOS due to reachable assertion in Modem because of invalid network configuration.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33263
Published: 2023-06-06
Description: Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33264
Published: 2023-06-06
Description: Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
CVSS Score: 7.9 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33267
Published: 2023-06-06
Description: Memory corruption in Linux while sending DRM request.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33303
Published: 2023-06-06
Description: Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-33307
Published: 2023-06-06
Description: Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
CVSS Score: 8.4 (HIGH)
CWE: CWE-415, CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40507
Published: 2023-06-06
Description: Memory corruption due to double free in Core while mapping HLOS address to the list.
CVSS Score: 8.4 (HIGH)
CWE: CWE-415, CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40521
Published: 2023-06-06
Description: Transient DOS due to improper authorization in Modem
CVSS Score: 7.5 (HIGH)
CWE: CWE-285, CWE-287
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40522
Published: 2023-06-06
Description: Memory corruption in Linux Networking due to double free while handling a hyp-assign.
CVSS Score: 8.4 (HIGH)
CWE: CWE-415, CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40523
Published: 2023-06-06
Description: Information disclosure in Kernel due to indirect branch misprediction.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200, CWE-668
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40525
Published: 2023-06-06
Description: Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200, CWE-668
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40529
Published: 2023-06-06
Description: Memory corruption due to improper access control in kernel while processing a mapping request from root process.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284, CWE-863
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40533
Published: 2023-06-06
Description: Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-822, CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40536
Published: 2023-06-06
Description: Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285, CWE-287
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2022-40538
Published: 2023-06-06
Description: Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21628
Published: 2023-06-06
Description: Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVSS Score: 8.4 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21632
Published: 2023-06-06
Description: Memory corruption in Automotive GPU while querying a gsl memory node.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21656
Published: 2023-06-06
Description: Memory corruption in WLAN HOST while receiving an WMI event from firmware.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21657
Published: 2023-06-06
Description: Memoru corruption in Audio when ADSP sends input during record use case.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21658
Published: 2023-06-06
Description: Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21659
Published: 2023-06-06
Description: Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21660
Published: 2023-06-06
Description: Transient DOS in WLAN Firmware while parsing FT Information Elements.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21661
Published: 2023-06-06
Description: Transient DOS while parsing WLAN beacon or probe-response frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21669
Published: 2023-06-06
Description: Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE: CVE-2023-21670
Published: 2023-06-06
Description: Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-863
References: http://packetstormsecurity.com/files/173296/Qualcomm-Adreno-KGSL-Insecure-Execution.html; https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin; http://packetstormsecurity.com/files/173296/Qualcomm-Adreno-KGSL-Insecure-Execution.html
CVE: CVE-2023-20727
Published: 2023-06-06
Description: In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588531; Issue ID: ALPS07588531.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/June-2023; https://corp.mediatek.com/product-security-bulletin/June-2023
CVE: CVE-2023-2833
Published: 2023-06-06
Description: The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://lana.codes/lanavdb/a889c3ff-5df0-4d7e-951f-0b0406468efa/; https://plugins.trac.wordpress.org/browser/reviewx/tags/1.6.13/includes/rx-functions.php#L972; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2916148%40reviewx&old=2912114%40reviewx&sfp_email=&sfph_mail=#file472
CVE: CVE-2023-0985
Published: 2023-06-06
Description: An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allows to take over the admin user and therefore fully compromise the account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://cert.vde.com/en/advisories/VDE-2023-002/; https://cert.vde.com/en/advisories/VDE-2023-002/
CVE: CVE-2023-1779
Published: 2023-06-06
Description: Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of another accounts contact information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://cert.vde.com/en/advisories/VDE-2023-008/; https://cert.vde.com/en/advisories/VDE-2023-008/
CVE: CVE-2023-3119
Published: 2023-06-06
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Service Provider Management System 1.0. Affected by this issue is some unknown functionality of the file view.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-230798 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Service%20Provider%20Management%20System%20-%20multiple%20vulnerabilities.md; https://vuldb.com/?ctiid.230798; https://vuldb.com/?id.230798
CVE: CVE-2023-3120
Published: 2023-06-06
Description: A vulnerability, which was classified as critical, was found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file view_service.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230799.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Service%20Provider%20Management%20System%20-%20multiple%20vulnerabilities.md; https://vuldb.com/?ctiid.230799; https://vuldb.com/?id.230799