deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-28350
Published: 2023-05-31
Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. Attacker-supplied input is not validated/sanitized before being rendered in both the Teacher and Student Console applications, enabling an attacker to execute JavaScript in these applications. Due to the rich and highly privileged functionality offered by the Teacher Console, the ability to silently exploit Cross Site Scripting (XSS) on the Teacher Machine enables remote code execution on any connected student machine (and the teacher's machine).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/; https://research.nccgroup.com/?research=Technical%20advisories; https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE: CVE-2023-28351
Published: 2023-05-31
Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with the Student application installed is logged to a world-readable directory. A local attacker can trivially extract these cleartext keystrokes, potentially enabling them to obtain PII and/or to compromise personal accounts owned by the victim.
CVSS Score: 3.3 (LOW)
CWE: CWE-532, CWE-532
References: https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/; https://research.nccgroup.com/?research=Technical%20advisories; https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE: CVE-2023-28352
Published: 2023-05-31
Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled.
CVSS Score: 7.4 (HIGH)
CWE: CWE-863, CWE-863
References: https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/; https://research.nccgroup.com/?research=Technical%20advisories; https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE: CVE-2023-28353
Published: 2023-05-31
Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. An unauthenticated attacker is able to upload any type of file to any location on the Teacher Console's computer, enabling a variety of different exploitation paths including code execution. It is also possible for the attacker to chain this vulnerability with others to cause a deployed DLL file to immediately execute as NT AUTHORITY/SYSTEM.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/; https://research.nccgroup.com/?research=Technical%20advisories; https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE: CVE-2023-29742
Published: 2023-05-31
Description: An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database.
CVSS Score: 7.8 (HIGH)
References: http://www.zmtqsh.com/; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29742/CVE%20detail.md; https://play.google.com/store/apps/details?id=com.icoolme.android.weather
CVE: CVE-2023-29745
Published: 2023-05-31
Description: An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database.
CVSS Score: 7.1 (HIGH)
CWE: CWE-346
References: http://www.zmtqsh.com/; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29745/CVE%20detail.md; https://play.google.com/store/apps/details?id=com.TheThaiger.android
CVE: CVE-2023-2612
Published: 2023-05-31
Description: Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-667, CWE-667
References: http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html; https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e; https://ubuntu.com/security/CVE-2023-2612
CVE: CVE-2021-31233
Published: 2023-05-31
Description: SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the edit_breed.php parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/gabesolomon/CVE-2021-31233; https://www.sourcecodester.com/php/12824/fighting-cock-information-system.html; https://github.com/gabesolomon/CVE-2021-31233
CVE: CVE-2023-23562
Published: 2023-05-31
Description: Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters.
CVSS Score: 4.3 (MEDIUM)
References: https://advisories.stormshield.eu; https://advisories.stormshield.eu/2023-002/; https://advisories.stormshield.eu
CVE: CVE-2023-2998
Published: 2023-05-31
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/c120070a66e6c497c328d3b6b067eebcd8ea8493; https://huntr.dev/bounties/8282d78e-f399-4bf4-8403-f39103a31e78; https://github.com/thorsten/phpmyfaq/commit/c120070a66e6c497c328d3b6b067eebcd8ea8493
CVE: CVE-2023-2999
Published: 2023-05-31
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/937913948cab382a38f681e0bd29c152e2f383cd; https://huntr.dev/bounties/4d89c7cc-fb4c-4b64-9b67-f0189f70a620; https://github.com/thorsten/phpmyfaq/commit/937913948cab382a38f681e0bd29c152e2f383cd
CVE: CVE-2023-30197
Published: 2023-05-31
Description: Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://friends-of-presta.github.io/security-advisories/modules/2023/05/30/myinventory.html; https://github.com/PrestaShop/PrestaShop/blob/6c05518b807d014ee8edb811041e3de232520c28/classes/Tools.php#L1247; https://friends-of-presta.github.io/security-advisories/modules/2023/05/30/myinventory.html
CVE: CVE-2014-125103
Published: 2023-05-31
Description: A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function twttr_settings_page of the file twitter.php. The manipulation of the argument twttr_url_twitter/bws_license_key/bws_license_plugin leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.7 is able to address this issue. The patch is named e04d59ab578316ffeb204cf32dc71c0d0e1ff77c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230155.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/twitter-plugin/commit/e04d59ab578316ffeb204cf32dc71c0d0e1ff77c; https://vuldb.com/?ctiid.230155; https://vuldb.com/?id.230155
CVE: CVE-2015-10107
Published: 2023-05-31
Description: A vulnerability was found in Simplr Registration Form Plus+ Plugin up to 2.3.4 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.3.5 is able to address this issue. The identifier of the patch is d588446844dd49232ab400ef213ff5b92121c33e. It is recommended to upgrade the affected component. The identifier VDB-230153 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/simplr-registration-form/commit/d588446844dd49232ab400ef213ff5b92121c33e; https://vuldb.com/?ctiid.230153; https://vuldb.com/?id.230153
CVE: CVE-2023-2435
Published: 2023-05-31
Description: The Blog-in-Blog plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.0.0 via a shortcode attribute. This allows editor-level, and above, attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://plugins.trac.wordpress.org/browser/blog-in-blog/tags/1.1.1/blog-in-blog.php#L153; https://plugins.trac.wordpress.org/changeset/3446931/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d53161ad-cc5f-4433-b288-a8095cdfd7db?source=cve
CVE: CVE-2023-2436
Published: 2023-05-31
Description: The Blog-in-Blog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blog_in_blog' shortcode in versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with editor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/blog-in-blog/tags/1.1.1/blog-in-blog.php#L257; https://plugins.trac.wordpress.org/changeset/3446931/; https://www.wordfence.com/threat-intel/vulnerabilities/id/5c6a88c3-18b7-470f-8014-373ead66dcfa?source=cve
CVE: CVE-2023-2545
Published: 2023-05-31
Description: The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to access the login links, which can be used for privilege escalation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/feather-login-page/trunk/features/inc/admin/expirable-login-link.php?rev=2612332#L85; https://www.wordfence.com/threat-intel/vulnerabilities/id/b2ab2178-7438-43ef-961e-b54d0d230f4a?source=cve; https://plugins.trac.wordpress.org/browser/feather-login-page/trunk/features/inc/admin/expirable-login-link.php?rev=2612332#L85
CVE: CVE-2023-2547
Published: 2023-05-31
Description: The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete the temp user generated by the plugin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/feather-login-page/trunk/features/inc/admin/expirable-login-link.php?rev=2612332#L71; https://www.wordfence.com/threat-intel/vulnerabilities/id/5d58a6a4-de2c-485f-a8b0-7a7d144fbf3c?source=cve; https://plugins.trac.wordpress.org/browser/feather-login-page/trunk/features/inc/admin/expirable-login-link.php?rev=2612332#L71
CVE: CVE-2023-2549
Published: 2023-05-31
Description: The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1. This is due to missing nonce validation in the 'createTempAccountLink' function. This makes it possible for unauthenticated attackers to create a new user with administrator role via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. An attacker can leverage CVE-2023-2545 to get the login link or request a password reset to the new user's email address.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/feather-login-page/trunk/features/inc/admin/expirable-login-link.php?rev=2612332#L206; https://www.wordfence.com/threat-intel/vulnerabilities/id/12560b8e-9c47-4f7f-ac9c-d86f17914ba3?source=cve; https://plugins.trac.wordpress.org/browser/feather-login-page/trunk/features/inc/admin/expirable-login-link.php?rev=2612332#L206
CVE: CVE-2023-2987
Published: 2023-05-31
Description: The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wa_pdx_op_config_set' function in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to the plugin to change the 'validation_token' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345, CWE-345
References: https://lana.report/publication/6e779e9a-e0f9-4102-9f0b-ad46e9c4533f/; https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28; https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59
CVE: CVE-2023-1661
Published: 2023-05-31
Description: The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wordpress.org/plugins/display-metadata/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/6f90c0d8-ede6-4f24-870f-19e888238e93?source=cve; https://wordpress.org/plugins/display-metadata/#developers
CVE: CVE-2023-2434
Published: 2023-05-31
Description: The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'reset' function in versions up to, and including, 3.2.3. This makes it possible for authenticated attackers, with editor-level permissions and above, to reset plugin settings.
CVSS Score: 3.8 (LOW)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/wp-nested-pages/tags/3.2.3/app/Form/Listeners/ResetSettings.php#L12; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2919175%40wp-nested-pages&old=2814681%40wp-nested-pages&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/8c3e61e9-3610-41b5-9820-28012dc657fd?source=cve
CVE: CVE-2023-2836
Published: 2023-05-31
Description: The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Don-H50/wp-vul/blob/main/CPF-xss-exploit.md; https://plugins.trac.wordpress.org/changeset/2917582/; https://www.wordfence.com/threat-intel/vulnerabilities/id/de11636b-a051-4e76-bc26-ed76f66fe0df?source=cve
CVE: CVE-2023-25539
Published: 2023-05-31
Description: 
Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. This is a high severity vulnerability as the exploitation allows an attacker to take complete control of a system, so Dell recommends customers to upgrade at the earliest opportunity.


CVSS Score: 8.4 (HIGH)
CWE: CWE-94, CWE-78
References: https://www.dell.com/support/kbdoc/en-us/000211267/dsa-2023-060-dell-networker-security-update-for-an-nsrcapinfo-vulnerability; https://www.dell.com/support/kbdoc/en-us/000211267/dsa-2023-060-dell-networker-security-update-for-an-nsrcapinfo-vulnerability
CVE: CVE-2023-26131
Published: 2023-05-31
Description: All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting (XSS) via the themes.NoPage(filename, theme) function due to improper user input sanitization. Exploiting this vulnerability is possible when a file/resource is not found.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: https://github.com/xyproto/algernon/blob/aab[PII_REDACTED]52d02a8a93f40baf53ed93e639a/engine/handlers.go%23L512; https://github.com/xyproto/algernon/blob/aab[PII_REDACTED]52d02a8a93f40baf53ed93e639a/engine/handlers.go%23L514; https://github.com/xyproto/algernon/blob/aab[PII_REDACTED]52d02a8a93f40baf53ed93e639a/themes/html.go%23L145
CVE: CVE-2023-2304
Published: 2023-05-31
Description: The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_favorites' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/favorites/tags/2.3.2/app/API/Shortcodes/UserFavoritesShortcode.php#L57; https://plugins.trac.wordpress.org/browser/favorites/tags/2.3.2/assets/js/favorites.js#L421; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2919192%40favorites&old=2805323%40favorites&sfp_email=&sfph_mail=
CVE: CVE-2023-2749
Published: 2023-05-31
Description: Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability to gain unauthorized access to sensitive files or directories without appropriate permission restrictions. Download Center on ADM 4.0 and above will be affected. Affected products and versions include: Download Center 1.1.5.r1280 and below. 
CVSS Score: 8.6 (HIGH)
CWE: CWE-200, CWE-276
References: https://www.asustor.com/security/security_advisory_detail?id=24; https://www.asustor.com/security/security_advisory_detail?id=24
CVE: CVE-2023-3003
Published: 2023-05-31
Description: A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_prices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230347.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/shiyur14/bugReport/blob/main/SQL.md; https://vuldb.com/?ctiid.230347; https://vuldb.com/?id.230347
CVE: CVE-2023-3004
Published: 2023-05-31
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Simple Chat System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=read_msg of the component POST Parameter Handler. The manipulation of the argument convo_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230348.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/sikii7/CVE/blob/main/SQL.md; https://vuldb.com/?ctiid.230348; https://vuldb.com/?id.230348
CVE: CVE-2023-3005
Published: 2023-05-31
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=save_area of the component POST Parameter Handler. The manipulation of the argument area with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230349 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/sikii7/CVE/blob/main/XSS.md; https://vuldb.com/?ctiid.230349; https://vuldb.com/?id.230349
CVE: CVE-2023-2909
Published: 2023-05-31
Description: EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.asustor.com/security/security_advisory_detail?id=25; https://www.asustor.com/security/security_advisory_detail?id=25
CVE: CVE-2023-30285
Published: 2023-05-31
Description: An issue in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain the login credentials of a user via a crafted request sent to /rest/synchronizer/1.0/technicalUser.
CVSS Score: 7.5 (HIGH)
References: http://deviniti.com; http://issue.com; https://github.com/D23K4N/CVE/blob/main/CVE-2023-30285.md
CVE: CVE-2023-3007
Published: 2023-05-31
Description: A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-230354 is the identifier assigned to this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-640, CWE-640
References: https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/student-management-system/password_reset.md; https://vuldb.com/?ctiid.230354; https://vuldb.com/?id.230354
CVE: CVE-2023-3008
Published: 2023-05-31
Description: A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230355.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/student-management-system/sql_inject.md; https://vuldb.com/?ctiid.230355; https://vuldb.com/?id.230355
CVE: CVE-2023-33485
Published: 2023-05-31
Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/5; https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/5
CVE: CVE-2023-33486
Published: 2023-05-31
Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/3; https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/3