deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-50104
Published: 2023-12-29
Description: ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/zzq66/cve4; https://github.com/zzq66/cve4
CVE: CVE-2023-52085
Published: 2023-12-29
Description: Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value that would then be included without further processing in the compilation of custom stylesheets via LESS. This had the potential to lead to a Local File Inclusion vulnerability. This issue has been patched in v1.2.4.
CVSS Score: 3.3 (LOW)
CWE: CWE-22
References: https://github.com/wintercms/winter/commit/5bc9257fe2bc47d8b786a1b1bf96bafad23d8ddd; https://github.com/wintercms/winter/security/advisories/GHSA-2x7r-93ww-cxrq; https://github.com/wintercms/winter/commit/5bc9257fe2bc47d8b786a1b1bf96bafad23d8ddd
CVE: CVE-2023-7141
Published: 2023-12-29
Description: A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249144.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/h4md153v63n/CVEs/blob/main/Client_Details_System/Client_Details_System-SQL_Injection_5.md; https://vuldb.com/?ctiid.249144; https://vuldb.com/?id.249144
CVE: CVE-2023-7142
Published: 2023-12-29
Description: A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249145 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/h4md153v63n/CVEs/blob/main/Client_Details_System/Client_Details_System-SQL_Injection_6.md; https://vuldb.com/?ctiid.249145; https://vuldb.com/?id.249145
CVE: CVE-2023-7143
Published: 2023-12-29
Description: A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/regester.php. The manipulation of the argument fname/lname/email/contact leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249146 is the identifier assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/h4md153v63n/CVEs/blob/main/Client_Details_System/Client_Details_System-Blind_Cross_Site_Scripting.md; https://vuldb.com/?ctiid.249146; https://vuldb.com/?id.249146
CVE: CVE-2023-7144
Published: 2023-12-29
Description: A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249147.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://note.zhaoj.in/share/4HDWrBHGCf9e; https://vuldb.com/?ctiid.249147; https://vuldb.com/?id.249147
CVE: CVE-2023-23431
Published: 2023-12-29
Description: 
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.


CVSS Score: 7.3 (HIGH)
CWE: CWE-347, CWE-347
References: https://www.hihonor.com/global/security/cve-2023-23431/; https://www.hihonor.com/global/security/cve-2023-23431/
CVE: CVE-2023-23432
Published: 2023-12-29
Description: 
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.


CVSS Score: 7.3 (HIGH)
CWE: CWE-347, CWE-347
References: https://www.hihonor.com/global/security/cve-2023-23432/; https://www.hihonor.com/global/security/cve-2023-23432/
CVE: CVE-2023-23433
Published: 2023-12-29
Description: 
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.


CVSS Score: 4.0 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://www.hihonor.com/global/security/cve-2023-23433/; https://www.hihonor.com/global/security/cve-2023-23433/
CVE: CVE-2023-23434
Published: 2023-12-29
Description: 
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.


CVSS Score: 4.0 (MEDIUM)
References: https://www.hihonor.com/global/security/cve-2023-23434/; https://www.hihonor.com/global/security/cve-2023-23434/
CVE: CVE-2023-23435
Published: 2023-12-29
Description: 
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file


CVSS Score: 4.0 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://www.hihonor.com/global/security/cve-2023-23435/; https://www.hihonor.com/global/security/cve-2023-23435/
CVE: CVE-2023-23436
Published: 2023-12-29
Description: 
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file





CVSS Score: 7.3 (HIGH)
CWE: CWE-347, CWE-347
References: https://www.hihonor.com/global/security/cve-2023-23436/; https://www.hihonor.com/global/security/cve-2023-23436/
CVE: CVE-2023-31292
Published: 2023-12-29
Description: An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via "Back Button Refresh" attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://herolab.usd.de/en/security-advisories/usd-2022-0051/; https://herolab.usd.de/en/security-advisories/usd-2022-0051/
CVE: CVE-2023-31298
Published: 2023-12-29
Description: Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://herolab.usd.de/en/security-advisories/usd-2022-0060/; https://herolab.usd.de/en/security-advisories/usd-2022-0060/
CVE: CVE-2023-31301
Published: 2023-12-29
Description: Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://herolab.usd.de/en/security-advisories/usd-2022-0059/; https://herolab.usd.de/en/security-advisories/usd-2022-0059/
CVE: CVE-2023-7145
Published: 2023-12-29
Description: A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Framework.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249148.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://note.zhaoj.in/share/LEbo1ypfzfQh; https://vuldb.com/?ctiid.249148; https://vuldb.com/?id.249148
CVE: CVE-2023-7146
Published: 2023-12-29
Description: A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249149 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://note.zhaoj.in/share/jRqEcVBTsZh4; https://vuldb.com/?ctiid.249149; https://vuldb.com/?id.249149
CVE: CVE-2023-23424
Published: 2023-12-29
Description: 
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution


CVSS Score: 6.5 (MEDIUM)
References: https://www.hihonor.com/global/security/cve-2023-23424/; https://www.hihonor.com/global/security/cve-2023-23424/
CVE: CVE-2023-23426
Published: 2023-12-29
Description: 
Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure.


CVSS Score: 6.6 (MEDIUM)
References: https://www.hihonor.com/global/security/cve-2023-23426/; https://www.hihonor.com/global/security/cve-2023-23426/
CVE: CVE-2023-23427
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.


CVSS Score: 4.0 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://www.hihonor.com/global/security/cve-2023-23427/; https://www.hihonor.com/global/security/cve-2023-23427/
CVE: CVE-2023-23428
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.


CVSS Score: 3.3 (LOW)
CWE: CWE-269, CWE-269
References: https://www.hihonor.com/global/security/cve-2023-23428/; https://www.hihonor.com/global/security/cve-2023-23428/
CVE: CVE-2023-23429
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.


CVSS Score: 4.0 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://www.hihonor.com/global/security/cve-2023-23429/; https://www.hihonor.com/global/security/cve-2023-23429/
CVE: CVE-2023-23430
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVSS Score: 3.3 (LOW)
CWE: CWE-269, CWE-269
References: https://www.hihonor.com/global/security/cve-2023-23430/; https://www.hihonor.com/global/security/cve-2023-23430/
CVE: CVE-2023-23437
Published: 2023-12-29
Description: 
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak


CVSS Score: 3.3 (LOW)
CWE: CWE-922
References: https://www.hihonor.com/global/security/cve-2023-23437/; https://www.hihonor.com/global/security/cve-2023-23437/
CVE: CVE-2023-23438
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions


CVSS Score: 4.0 (MEDIUM)
CWE: CWE-269
References: https://www.hihonor.com/global/security/cve-2023-23438/; https://www.hihonor.com/global/security/cve-2023-23438/
CVE: CVE-2023-23439
Published: 2023-12-29
Description: 
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.


CVSS Score: 4.0 (MEDIUM)
References: https://www.hihonor.com/global/security/cve-2023-23439/; https://www.hihonor.com/global/security/cve-2023-23439/
CVE: CVE-2023-23440
Published: 2023-12-29
Description: 
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
CVSS Score: 3.3 (LOW)
References: https://www.hihonor.com/global/security/cve-2023-23440/; https://www.hihonor.com/global/security/cve-2023-23440/
CVE: CVE-2023-31293
Published: 2023-12-29
Description: An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system user's web browser, allowing the journal to be displayed, despite the option being disabled.
CVSS Score: 4.3 (MEDIUM)
References: https://herolab.usd.de/en/security-advisories/usd-2022-0061/; https://herolab.usd.de/en/security-advisories/usd-2022-0061/
CVE: CVE-2023-31294
Published: 2023-12-29
Description: CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the Delivery Name field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1236
References: https://herolab.usd.de/en/security-advisories/usd-2022-0052/; https://herolab.usd.de/en/security-advisories/usd-2022-0052/
CVE: CVE-2023-7147
Published: 2023-12-29
Description: A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl/User.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-249150 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://note.zhaoj.in/share/affd8cjn50HC; https://vuldb.com/?ctiid.249150; https://vuldb.com/?id.249150
CVE: CVE-2023-7148
Published: 2023-12-29
Description: A vulnerability has been found in ShifuML shifu 0.12.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/ml/shifu/shifu/core/DataPurifier.java of the component Java Expression Language Handler. The manipulation of the argument FilterExpression leads to code injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249151.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: https://drive.google.com/file/d/1ST3dD-iwUBgBNZ8tGaBbqVi1zRh5rLND/view; https://vuldb.com/?ctiid.249151; https://vuldb.com/?id.249151
CVE: CVE-2023-23441
Published: 2023-12-29
Description: 
Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.


CVSS Score: 6.0 (MEDIUM)
CWE: CWE-125
References: https://www.hihonor.com/global/security/cve-2023-23441/; https://www.hihonor.com/global/security/cve-2023-23441/
CVE: CVE-2023-23442
Published: 2023-12-29
Description: 
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.


CVSS Score: 4.6 (MEDIUM)
CWE: CWE-843
References: https://www.hihonor.com/global/security/cve-2023-23442/; https://www.hihonor.com/global/security/cve-2023-23442/
CVE: CVE-2023-23443
Published: 2023-12-29
Description: 
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.


CVSS Score: 4.6 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://www.hihonor.com/global/security/cve-2023-23443/; https://www.hihonor.com/global/security/cve-2023-23443/
CVE: CVE-2023-31296
Published: 2023-12-29
Description: CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers to obtain sensitive information via the User Name field.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1236, CWE-94
References: https://herolab.usd.de/en/security-advisories/usd-2022-0054/; https://herolab.usd.de/en/security-advisories/usd-2022-0054/
CVE: CVE-2023-51426
Published: 2023-12-29
Description: 
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.


CVSS Score: 4.6 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://www.hihonor.com/global/security/cve-2023-51426/; https://www.hihonor.com/global/security/cve-2023-51426/
CVE: CVE-2023-51427
Published: 2023-12-29
Description: 
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.



CVSS Score: 4.6 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://www.hihonor.com/global/security/cve-2023-51427/; https://www.hihonor.com/global/security/cve-2023-51427/
CVE: CVE-2023-51428
Published: 2023-12-29
Description: 
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.


CVSS Score: 4.6 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://www.hihonor.com/global/security/cve-2023-51428/; https://www.hihonor.com/global/security/cve-2023-51428/
CVE: CVE-2023-51429
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.


CVSS Score: 6.0 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://www.hihonor.com/global/security/cve-2023-51429/; https://www.hihonor.com/global/security/cve-2023-51429/
CVE: CVE-2023-51430
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.



CVSS Score: 4.4 (MEDIUM)
CWE: CWE-269
References: https://www.hihonor.com/global/security/cve-2023-51430/; https://www.hihonor.com/global/security/cve-2023-51430/
CVE: CVE-2023-51431
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.


CVSS Score: 7.0 (HIGH)
References: https://www.hihonor.com/global/security/cve-2023-51431/; https://www.hihonor.com/global/security/cve-2023-51431/
CVE: CVE-2023-51432
Published: 2023-12-29
Description: 
Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.


CVSS Score: 3.2 (LOW)
CWE: CWE-125
References: https://www.hihonor.com/global/security/cve-2023-51432/; https://www.hihonor.com/global/security/cve-2023-51432/
CVE: CVE-2023-51433
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.


CVSS Score: 2.9 (LOW)
CWE: CWE-269
References: https://www.hihonor.com/global/security/cve-2023-51433/; https://www.hihonor.com/global/security/cve-2023-51433/
CVE: CVE-2023-51434
Published: 2023-12-29
Description: 
Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.


CVSS Score: 9.3 (CRITICAL)
CWE: CWE-120
References: https://www.hihonor.com/global/security/cve-2023-51434/; https://www.hihonor.com/global/security/cve-2023-51434/
CVE: CVE-2023-51435
Published: 2023-12-29
Description: 
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.


CVSS Score: 7.1 (HIGH)
CWE: CWE-269, CWE-269
References: https://www.hihonor.com/global/security/cve-2023-51435/; https://www.hihonor.com/global/security/cve-2023-51435/
CVE: CVE-2023-52173
Published: 2023-12-29
Description: XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x54D%5D%2B3%7B%2B0~3%23460c%7D%20469.15d%20%40%20xnview.exe%2B0x3ADBD0.html; https://newsgroup.xnview.com/viewtopic.php?f=35&t=46016; https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x54D%5D%2B3%7B%2B0~3%23460c%7D%20469.15d%20%40%20xnview.exe%2B0x3ADBD0.html
CVE: CVE-2023-52174
Published: 2023-12-29
Description: XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x1C94%5D%2B4%7B%2B0~4%231b99%7D%20128.ecf%20%40%20xnview.exe%2B0x3125D6.html; https://newsgroup.xnview.com/viewtopic.php?f=35&t=46016; https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x1C94%5D%2B4%7B%2B0~4%231b99%7D%20128.ecf%20%40%20xnview.exe%2B0x3125D6.html
CVE: CVE-2023-6939
Published: 2023-12-29
Description: 
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-843
References: https://www.hihonor.com/global/security/cve-2023-6939/; https://www.hihonor.com/global/security/cve-2023-6939/
CVE: CVE-2023-7149
Published: 2023-12-29
Description: A vulnerability was found in code-projects QR Code Generator 1.0. It has been classified as problematic. This affects an unknown part of the file /download.php?file=author.png. The manipulation of the argument file with the input "><iMg src=N onerror=alert(document.domain)> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249153 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/h4md153v63n/CVEs/blob/main/QR_Code_Generator/QR_Code_Generator-Reflected_Cross_Site_Scripting.md; https://vuldb.com/?ctiid.249153; https://vuldb.com/?id.249153
CVE: CVE-2023-7150
Published: 2023-12-29
Description: A vulnerability classified as critical was found in Campcodes Chic Beauty Salon 20230703. Affected by this vulnerability is an unknown functionality of the file product-list.php of the component Product Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249157 was assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://github.com/laoquanshi/-Arbitrary-file-upload-vulnerability-; https://github.com/laoquanshi/Chic-Vulnerability-; https://vuldb.com/?ctiid.249157
CVE: CVE-2023-31299
Published: 2023-12-29
Description: Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Barcode field of a container.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://herolab.usd.de/en/security-advisories/usd-2022-0055/; https://herolab.usd.de/en/security-advisories/usd-2022-0055/
CVE: CVE-2023-7152
Published: 2023-12-29
Description: A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclosed to the public and may be used. The patch is identified as 8b24aa36ba978eafc6114b6798b47b7bfecdca26. It is recommended to apply a patch to fix this issue. VDB-249158 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/jimmo/micropython/commit/8b24aa36ba978eafc6114b6798b47b7bfecdca26; https://github.com/micropython/micropython/issues/12887; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4E2HYWCZB5R4SHY4SZZZSFDMD64N4SOZ/
CVE: CVE-2023-7155
Published: 2023-12-29
Description: A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown part of the file /ample/app/action/edit_product.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249177 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://medium.com/@heishou/inventory-management-system-sql-injection-f6d67247c7ae; https://vuldb.com/?ctiid.249177; https://vuldb.com/?id.249177