deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-47039
Published: 2024-01-02
Description: A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell (`cmd.exe`). When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute `cmd.exe` within the operating system. However, due to path search order issues, Perl initially looks for cmd.exe in the current working directory. This flaw allows an attacker with limited privileges to place`cmd.exe` in locations with weak permissions, such as `C:\ProgramData`. By doing so, arbitrary code can be executed when an administrator attempts to use this executable from these compromised locations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://access.redhat.com/security/cve/CVE-2023-47039; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746; https://bugzilla.redhat.com/show_bug.cgi?id=2249525
CVE: CVE-2023-47216
Published: 2024-01-02
Description: 
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources


CVSS Score: 2.9 (LOW)
CWE: CWE-772, CWE-772
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md; https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md
CVE: CVE-2023-47857
Published: 2024-01-02
Description: 
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md; https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md
CVE: CVE-2023-48360
Published: 2024-01-02
Description: 
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md; https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md
CVE: CVE-2023-49135
Published: 2024-01-02
Description: 
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md; https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md
CVE: CVE-2023-49142
Published: 2024-01-02
Description: 
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md; https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md
CVE: CVE-2023-47858
Published: 2024-01-02
Description: Mattermost fails to properly verify the permissions needed for viewing archived public channels,  allowing a member of one team to get details about the archived public channels of another team via the GET /api/v4/teams/<team-id>/channels/deleted endpoint.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-48732
Published: 2024-01-02
Description: Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-50333
Published: 2024-01-02
Description: Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.


CVSS Score: 3.7 (LOW)
CWE: CWE-284
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-6693
Published: 2024-01-02
Description: A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are enabled. This could allow a malicious user to overwrite local variables allocated on the stack. Specifically, the `out_sg` variable could be used to read a part of process memory and send it to the wire, causing an information leak.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://access.redhat.com/errata/RHSA-2024:2962; https://access.redhat.com/errata/RHSA-2025:4492; https://access.redhat.com/security/cve/CVE-2023-6693
CVE: CVE-2023-6436
Published: 2024-01-02
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ekol Informatics Website Template allows SQL Injection.This issue affects Website Template: through 20231215.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-24-0001; https://www.usom.gov.tr/bildirim/tr-24-0001
CVE: CVE-2015-10128
Published: 2024-01-02
Description: A vulnerability was found in rt-prettyphoto Plugin up to 1.2 on WordPress and classified as problematic. Affected by this issue is the function royal_prettyphoto_plugin_links of the file rt-prettyphoto.php. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.3 is able to address this issue. The patch is identified as 0d3d38cfa487481b66869e4212df1cefc281ecb7. It is recommended to upgrade the affected component. VDB-249422 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/rt-prettyphoto/commit/0d3d38cfa487481b66869e4212df1cefc281ecb7; https://vuldb.com/?ctiid.249422; https://vuldb.com/?id.249422
CVE: CVE-2017-20188
Published: 2024-01-02
Description: A vulnerability has been found in Zimbra zm-ajax up to 8.8.1 and classified as problematic. Affected by this vulnerability is the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js. The manipulation of the argument message leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 8.8.2 is able to address this issue. The identifier of the patch is 8d039d6efe80780adc40c6f670c06d21de272105. It is recommended to upgrade the affected component. The identifier VDB-249421 was assigned to this vulnerability.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: https://github.com/Zimbra/zm-ajax/commit/8d039d6efe80780adc40c6f670c06d21de272105; https://github.com/Zimbra/zm-ajax/releases/tag/8.8.2; https://vuldb.com/?ctiid.249421
CVE: CVE-2024-0188
Published: 2024-01-02
Description: A vulnerability, which was classified as problematic, was found in RRJ Nueva Ecija Engineer Online Portal 1.0. This affects an unknown part of the file change_password_teacher.php. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-249501 was assigned to this vulnerability.
CVSS Score: 3.1 (LOW)
CWE: CWE-521
References: https://mega.nz/file/2V9ARboA#-JIGiuLxxbri4T1mDEHl8OBeDrwLogoQlLiIji1AQZk; https://vuldb.com/?ctiid.249501; https://vuldb.com/?id.249501
CVE: CVE-2018-25097
Published: 2024-01-02
Description: A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of the patch is 0df8a5e[PII_REDACTED]973168648e4c74c69ce67fd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-249420.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/acumos/design-studio/commit/0df8a5e[PII_REDACTED]973168648e4c74c69ce67fd; https://github.com/acumos/design-studio/releases/tag/2.0.8; https://vuldb.com/?ctiid.249420
CVE: CVE-2023-4280
Published: 2024-01-02
Description: An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://community.silabs.com/069Vm0000004NinIAE; https://github.com/SiliconLabs/gecko_sdk; https://community.silabs.com/069Vm0000004NinIAE
CVE: CVE-2024-0189
Published: 2024-01-02
Description: A vulnerability has been found in RRJ Nueva Ecija Engineer Online Portal 1.0 and classified as problematic. This vulnerability affects unknown code of the file teacher_message.php of the component Create Message Handler. The manipulation of the argument Content with the input </title><scRipt>alert(x)</scRipt> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249502 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://mega.nz/file/WNNSmRbR#ANdE-2h3pyJ8rEktaD2XlSyuksUiCPWBMGMJlJnhb9Q; https://vuldb.com/?ctiid.249502; https://vuldb.com/?id.249502
CVE: CVE-2024-0193
Published: 2024-01-02
Description: A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/errata/RHSA-2024:1018; https://access.redhat.com/errata/RHSA-2024:1019; https://access.redhat.com/errata/RHSA-2024:1248
CVE: CVE-2022-3010
Published: 2024-01-02
Description: The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1391, CWE-916
References: https://csirt.divd.nl/CVE-2022-3010; https://csirt.divd.nl/DIVD-2022-00035; https://www.cisa.gov/news-events/ics-advisories/icsa-22-356-01
CVE: CVE-2023-48419
Published: 2024-01-02
Description: An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege 

CVSS Score: 10.0 (CRITICAL)
CWE: CWE-269
References: https://support.google.com/product-documentation/answer/14273332?hl=en&ref_topic=12974021&sjid=[PII_REDACTED]772963473-NA#zippy=%2Cspeakers; https://support.google.com/product-documentation/answer/14273332?hl=en&ref_topic=12974021&sjid=[PII_REDACTED]772963473-NA#zippy=%2Cspeakers
CVE: CVE-2023-7192
Published: 2024-01-02
Description: A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://access.redhat.com/errata/RHSA-2024:0723; https://access.redhat.com/errata/RHSA-2024:0725; https://access.redhat.com/errata/RHSA-2024:1188
CVE: CVE-2024-0190
Published: 2024-01-02
Description: A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file add_quiz.php of the component Quiz Handler. The manipulation of the argument Quiz Title/Quiz Description with the input </title><scRipt>alert(x)</scRipt> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249503.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://mega.nz/file/HANhAKyT#lGcBglLDU3LDdfJsri3vYgnwn5amW8gvdOxbbYjAwJw; https://vuldb.com/?ctiid.249503; https://vuldb.com/?id.249503
CVE: CVE-2023-49794
Published: 2024-01-02
Description: KernelSU is a Kernel-based root solution for Android devices. In versions 0.7.1 and prior, the logic of get apk path in KernelSU kernel module can be bypassed, which causes any malicious apk named `me.weishu.kernelsu` get root permission. If a KernelSU module installed device try to install any not checked apk which package name equal to the official KernelSU Manager, it can take over root privileges on the device. As of time of publication, a patched version is not available.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-290
References: https://drive.google.com/file/d/1b9UrmG_co9EJXB_yMBneRArUIR5sTuaN/view?usp=drive_link; https://github.com/tiann/KernelSU/security/advisories/GHSA-8rc5-x54x-5qc4; https://drive.google.com/file/d/1b9UrmG_co9EJXB_yMBneRArUIR5sTuaN/view?usp=drive_link
CVE: CVE-2023-50711
Published: 2024-01-02
Description: vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the `FamStructWrapper::deserialize` implementation provided by the crate for `vmm_sys_util::fam::FamStructWrapper` can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array length. Mismatch in the lengths might allow out of bounds memory access through Rust-safe methods. The issue was corrected in version 0.12.0 by inserting a check that verifies the lengths of compared flexible arrays are equal for any deserialized header and aborting deserialization otherwise. Moreover, the API was changed so that header length can only be modified through Rust-unsafe code. This ensures that users cannot trigger out-of-bounds memory access from Rust-safe code.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/rust-vmm/vmm-sys-util/commit/30172fca2a8e0a38667d934ee56682247e13f167; https://github.com/rust-vmm/vmm-sys-util/security/advisories/GHSA-875g-mfp6-g7f9; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5XMCLV2P3ANS3XN4NXZTV4PUNTLWUNJ/
CVE: CVE-2023-51652
Published: 2024-01-02
Description: OWASP AntiSamy .NET is a library for performing cleansing of HTML coming from untrusted sources. Prior to version 1.2.0, there is a potential for a mutation cross-site scripting (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive must be enabled in your policy file and also allow for certain tags at the same time. As a result, certain crafty inputs can result in elements in comment tags being interpreted as executable when using AntiSamy's sanitized output. This is patched in OWASP AntiSamy .NET 1.2.0 and later. See important remediation details in the reference given below. As a workaround, manually edit the AntiSamy policy file (e.g., antisamy.xml) by deleting the `preserveComments` directive or setting its value to `false`,  if present. Also it would be useful to make AntiSamy remove the `noscript` tag by adding a line described in the GitHub Security Advisory to the tag definitions under the `<tagrules>` node, or deleting it entirely if present. As the previously mentioned policy settings are preconditions for the mXSS attack to work, changing them as recommended should be sufficient to protect you against this vulnerability when using a vulnerable version of this library. However, the existing bug would still be present in AntiSamy or its parser dependency (HtmlAgilityPack). The safety of this workaround relies on configurations that may change in the future and don't address the root cause of the vulnerability. As such, it is strongly recommended to upgrade to a fixed version of AntiSamy.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/spassarop/antisamy-dotnet/commit/7e500daef6ad9c10e97c68feab78f4cb6e3083c6; https://github.com/spassarop/antisamy-dotnet/commit/[PII_REDACTED]e75a25cd0054ef[PII_REDACTED]38444a; https://github.com/spassarop/antisamy-dotnet/security/advisories/GHSA-8x6f-956f-q43w
CVE: CVE-2023-6752
Published: 2024-01-02
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6747. Reason: This candidate is a reservation duplicate of CVE-2023-6747. Notes: All CVE users should reference CVE-2023-6747 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-0191
Published: 2024-01-02
Description: A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/uploads/. The manipulation leads to file and directory information exposure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249504.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-538
References: https://mega.nz/file/uZt00bIA#uqwP2WkWK5kbKOUbRrgbZY4_-4enuhFw5O9LtJ_cclY; https://vuldb.com/?ctiid.249504; https://vuldb.com/?id.249504
CVE: CVE-2024-0192
Published: 2024-01-02
Description: A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file downloadable.php of the component Add Downloadable. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249505 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://mega.nz/file/2RNnjDTR#nDT4E74juKhdO3eWTv8VjDD2dDcNUzyAk2UR3psM8rM; https://vuldb.com/?ctiid.249505; https://vuldb.com/?id.249505
CVE: CVE-2023-45561
Published: 2024-01-02
Description: An issue in A-WORLD OIRASE BEER_waiting Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45561.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45561.md
CVE: CVE-2023-45892
Published: 2024-01-02
Description: An issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45892.md; https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45892.md
CVE: CVE-2023-45893
Published: 2024-01-02
Description: An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45893.md; https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45893.md
CVE: CVE-2023-47458
Published: 2024-01-02
Description: An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: http://springblade.com; https://gist.github.com/Mr-F0reigner/b05487f5ca52d17e214fffd6e1e0312a; https://gitee.com/smallc/SpringBlade
CVE: CVE-2024-0194
Published: 2024-01-02
Description: A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0. This issue affects some unknown processing of the file pages_account.php of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249509 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://drive.google.com/file/d/147yg6oMHoJ1WvhH-TT0-GXDjKyNCSoeX/view?usp=sharing; https://vuldb.com/?ctiid.249509; https://vuldb.com/?id.249509
CVE: CVE-2024-0195
Published: 2024-01-02
Description: A vulnerability, which was classified as critical, was found in spider-flow 0.4.3. Affected is the function FunctionService.saveFunction of the file src/main/java/org/spiderflow/controller/FunctionController.java. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249510 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://github.com/laoquanshi/puppy/blob/main/spider-flow%20code%20injection%20causes%20rce.md; https://vuldb.com/?ctiid.249510; https://vuldb.com/?id.249510
CVE: CVE-2024-21623
Published: 2024-01-02
Description: OTCLient is an alternative tibia client for otserv. Prior to commit db560de0b56476c87a2f[PII_REDACTED]39196dd254, the /mehah/otclient "`Analysis - SonarCloud`" workflow is vulnerable to an expression injection in Actions, allowing an attacker to run commands remotely on the runner, leak secrets, and alter the repository using this workflow. Commit db560de0b56476c87a2f[PII_REDACTED]39196dd254 contains a fix for this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/mehah/otclient/blob/72744edc3b9913b920e0fd12e929604f682fda75/.github/workflows/analysis-sonarcloud.yml#L91-L104; https://github.com/mehah/otclient/commit/db560de0b56476c87a2f[PII_REDACTED]39196dd254; https://github.com/mehah/otclient/security/advisories/GHSA-q6gr-wc79-v589
CVE: CVE-2024-21627
Published: 2024-01-02
Description: PrestaShop is an open-source e-commerce platform. Prior to versions 8.1.3 and 1.7.8.11, some event attributes are not detected by the `isCleanHTML` method. Some modules using the `isCleanHTML` method could be vulnerable to cross-site scripting. Versions 8.1.3 and 1.7.8.11 contain a patch for this issue. The best workaround is to use the `HTMLPurifier` library to sanitize html input coming from users. The library is already available as a dependency in the PrestaShop project. Beware though that in legacy object models, fields of `HTML` type will call `isCleanHTML`.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-79, CWE-79
References: https://github.com/PrestaShop/PrestaShop/commit/73cfb44666818eefd501b526a894fe884dd12129; https://github.com/PrestaShop/PrestaShop/commit/ba06d18466df5b92cb841d504cc[PII_REDACTED]883; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-xgpm-q3mq-46rq
CVE: CVE-2020-26623
Published: 2024-01-02
Description: SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under the Administration>Widget tab after the login portal.
CVSS Score: 3.8 (LOW)
CWE: CWE-89, CWE-89
References: http://gilacms.com; https://github.com/GilaCMS/gila; https://github.com/GilaCMS/gila/security/policy
CVE: CVE-2020-26624
Published: 2024-01-02
Description: A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the ID parameter after the login portal.
CVSS Score: 3.8 (LOW)
CWE: CWE-89, CWE-89
References: http://gilacms.com; https://github.com/GilaCMS/gila; https://github.com/GilaCMS/gila/security/policy