deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-46785
Published: 2022-05-13
Description: The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.
CVSS Score: 5.3 (MEDIUM)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2021-46786
Published: 2022-05-13
Description: The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2021-46787
Published: 2022-05-13
Description: The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2021-46788
Published: 2022-05-13
Description: Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2021-46789
Published: 2022-05-13
Description: Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://consumer.huawei.com/en/support/bulletin/2022/6/; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-1714
Published: 2022-05-13
Description: Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/radareorg/radare2/commit/3ecdbf8e21186a9c5a4d3cfa3b1e9fd27045340e; https://huntr.dev/bounties/1c22055b-b015-47a8-a57b[PII_REDACTED]d0; https://github.com/radareorg/radare2/commit/3ecdbf8e21186a9c5a4d3cfa3b1e9fd27045340e
CVE: CVE-2022-22260
Published: 2022-05-13
Description: The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-22261
Published: 2022-05-13
Description: The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-25591
Published: 2022-05-13
Description: BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://blogengine.io/; https://www.0xlanks.me/blog/cve-2022-25591-advisory/; https://blogengine.io/
CVE: CVE-2022-27247
Published: 2022-05-13
Description: onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full address, mail information, and phone number) via GastKont Insecure Direct Object Reference.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://myses.de/#about; https://myses.de/pdf/CVE2022-27247.pdf; https://myses.de/#about
CVE: CVE-2022-28821
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28822
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28823
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by a Use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28824
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by a Use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28825
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28826
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28827
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28828
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28829
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-28830
Published: 2022-05-13
Description: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/framemaker/apsb22-27.html; https://helpx.adobe.com/security/products/framemaker/apsb22-27.html
CVE: CVE-2022-29789
Published: 2022-05-13
Description: The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-29790
Published: 2022-05-13
Description: The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-29791
Published: 2022-05-13
Description: The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-29792
Published: 2022-05-13
Description: The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-29793
Published: 2022-05-13
Description: There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://consumer.huawei.com/en/support/bulletin/2022/6/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]
CVE: CVE-2022-29794
Published: 2022-05-13
Description: The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-29795
Published: 2022-05-13
Description: The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-29796
Published: 2022-05-13
Description: The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2022-30381
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/delet-file-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/delet-file-1.md
CVE: CVE-2022-30384
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-1.md
CVE: CVE-2022-30385
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-2.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-2.md
CVE: CVE-2022-30386
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-4.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-4.md
CVE: CVE-2022-30387
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-3.md.; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-3.md.
CVE: CVE-2022-30391
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-5.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-5.md
CVE: CVE-2022-30392
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-6.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-6.md
CVE: CVE-2022-30393
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-8.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-8.md
CVE: CVE-2022-30395
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-7.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-7.md
CVE: CVE-2022-30396
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-9.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-9.md
CVE: CVE-2022-30398
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-10.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-10.md
CVE: CVE-2022-30399
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-11.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-11.md
CVE: CVE-2022-30400
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-13.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-13.md
CVE: CVE-2022-30401
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-14.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-14.md
CVE: CVE-2022-30402
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-12.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-12.md
CVE: CVE-2022-30403
Published: 2022-05-13
Description: Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=products&c=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-15.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/merchandise-online-store/SQLi-15.md
CVE: CVE-2022-30404
Published: 2022-05-13
Description: College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/code-projects/College-Management-System/SQLi-1.md.; https://github.com/k0xx11/bug_report/blob/main/vendors/code-projects/College-Management-System/SQLi-1.md.
CVE: CVE-2022-30407
Published: 2022-05-13
Description: Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manage_user.php?id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/pharmacy-sales-and-inventory-system/SQLi-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/pharmacy-sales-and-inventory-system/SQLi-1.md
CVE: CVE-2022-30408
Published: 2022-05-13
Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=delete_img.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/delete-file-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/delete-file-1.md
CVE: CVE-2022-30411
Published: 2022-05-13
Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=individuals/view_individual&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-2.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-2.md
CVE: CVE-2022-30412
Published: 2022-05-13
Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/individuals/update_status.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-3.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-3.md
CVE: CVE-2022-30413
Published: 2022-05-13
Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=delete_application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-1.md
CVE: CVE-2022-30414
Published: 2022-05-13
Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/view_application&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-4.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-4.md
CVE: CVE-2022-30415
Published: 2022-05-13
Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/update_status.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-5.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-5.md