deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-23190
Published: 2024-04-08
Description: Upsell shop information of an account can be manipulated to execute script code in the context of the users browser session. To exploit this an attacker would require temporary access to a users account or an successful social engineering attack to lure users to maliciously configured accounts. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. Sanitization of user-defined upsell content has been improved. No publicly available exploits are known.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.open-xchange.com/appsuite/releases/8.21/; https://documentation.open-xchange.com/appsuite/releases/8.22/; https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0001.json
CVE: CVE-2024-23191
Published: 2024-04-08
Description: Upsell advertisement information of an account can be manipulated to execute script code in the context of the users browser session. To exploit this an attacker would require temporary access to a users account or an successful social engineering attack to lure users to maliciously configured accounts. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. Sanitization of user-defined upsell content has been improved. No publicly available exploits are known.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.open-xchange.com/appsuite/releases/8.21/; https://documentation.open-xchange.com/appsuite/releases/8.22/; https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0001.json
CVE: CVE-2024-23192
Published: 2024-04-08
Description: RSS feeds that contain malicious data- attributes could be abused to inject script code to a users browser session when reading compromised RSS feeds or successfully luring users to compromised accounts. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. Potentially malicious attributes now get removed from external RSS content. No publicly available exploits are known.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.open-xchange.com/appsuite/releases/8.21/; https://documentation.open-xchange.com/appsuite/releases/8.22/; https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0001.json
CVE: CVE-2024-31357
Published: 2024-04-08
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.5.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/ultimate-store-kit/wordpress-ultimate-store-kit-elementor-addons-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ultimate-store-kit/wordpress-ultimate-store-kit-elementor-addons-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-31375
Published: 2024-04-08
Description: Missing Authorization vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads.This issue affects WP2LEADS: from n/a through <= 3.2.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/wp2leads/vulnerability/wordpress-wp2leads-plugin-3-2-7-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp2leads/wordpress-wp2leads-plugin-3-2-7-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-52364
Published: 2024-04-08
Description: Vulnerability of input parameters being not strictly verified in the RSMC module.
Impact: Successful exploitation of this vulnerability may cause out-of-bounds write.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52385
Published: 2024-04-08
Description: Out-of-bounds write vulnerability in the RSMC module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52386
Published: 2024-04-08
Description: Out-of-bounds write vulnerability in the RSMC module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2024-26811
Published: 2024-04-08
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate payload size in ipc response

If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc
response to ksmbd kernel server. ksmbd should validate payload size of
ipc response from ksmbd.mountd to avoid memory overrun or
slab-out-of-bounds. This patch validate 3 ipc response that has payload.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://git.kernel.org/stable/c/51a6c2af9d20203ddeeaf73314ba8854b38d01bd; https://git.kernel.org/stable/c/76af689a45aa44714b46d1a7de4ffdf851ded896; https://git.kernel.org/stable/c/88b7f1143b15b29cccb8392b4f38e75b7bb3e300
CVE: CVE-2024-27895
Published: 2024-04-08
Description: Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2024-27896
Published: 2024-04-08
Description: Input verification vulnerability in the log module.
Impact: Successful exploitation of this vulnerability can affect integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2024-27897
Published: 2024-04-08
Description: Input verification vulnerability in the call module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2024-3438
Published: 2024-04-08
Description: A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/login.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259691.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemSQL1.md; https://vuldb.com/?ctiid.259691; https://vuldb.com/?id.259691
CVE: CVE-2022-43216
Published: 2024-04-08
Description: AbrhilSoft Employee's Portal before v5.6.2 was discovered to contain a SQL injection vulnerability in the login page.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://abrhil.com/; https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216; https://abrhil.com/
CVE: CVE-2024-26574
Published: 2024-04-08
Description: Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://filmora.wondershare.com/; https://github.com/Alaatk/CVE-2024-26574/tree/main; https://filmora.wondershare.com/
CVE: CVE-2024-3439
Published: 2024-04-08
Description: A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259692.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemSQL2.md; https://vuldb.com/?ctiid.259692; https://vuldb.com/?id.259692
CVE: CVE-2011-10006
Published: 2024-04-08
Description: A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to address this issue. The identifier of the patch is 6182a5682b12369ced0becd3b505439ce2eb8132. It is recommended to upgrade the affected component. The identifier VDB-259629 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/wp-postratings/commit/6182a5682b12369ced0becd3b505439ce2eb8132; https://github.com/wp-plugins/wp-postratings/commit/dcc68d03693152eba14d6fb33ba42528ff60e06a; https://github.com/wp-plugins/wp-postratings/releases/tag/1.65
CVE: CVE-2014-125111
Published: 2024-04-08
Description: A vulnerability was found in namithjawahar Wp-Insert up to 2.0.8 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.9 is able to address this issue. The name of the patch is a07b7b08084b9b85859f3968ce7fde0fd1fcbba3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-259628.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/wp-insert/commit/a07b7b08084b9b85859f3968ce7fde0fd1fcbba3; https://vuldb.com/?ctiid.259628; https://vuldb.com/?id.259628
CVE: CVE-2024-28066
Published: 2024-04-08
Description: In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).
CVSS Score: 8.8 (HIGH)
CWE: CWE-259, CWE-1391
References: https://syss.de; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-008.txt; https://syss.de
CVE: CVE-2024-2834
Published: 2024-04-08
Description: A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://portal.microfocus.com/s/article/KM000028275; https://portal.microfocus.com/s/article/KM000028275
CVE: CVE-2024-31805
Published: 2024-04-08
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to start the Telnet service without authorization via the telnet_enabled parameter in the setTelnetCfg function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_5_setTelnetCfg/CI.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_5_setTelnetCfg/CI.md
CVE: CVE-2024-31806
Published: 2024-04-08
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS) vulnerability in the RebootSystem function which can reboot the system without authorization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-75
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/DoS_RebootSystem/DoS.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/DoS_RebootSystem/DoS.md
CVE: CVE-2024-31807
Published: 2024-04-08
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the hostTime parameter in the NTPSyncWithHost function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_2_NTPSyncWithHost/CI.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_2_NTPSyncWithHost/CI.md
CVE: CVE-2024-31808
Published: 2024-04-08
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the webWlanIdx parameter in the setWebWlanIdx function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-233
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_3_setWebWlanIdx/CI.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_3_setWebWlanIdx/CI.md
CVE: CVE-2024-31809
Published: 2024-04-08
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-75
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_4_setUpgradeFW/CI.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_4_setUpgradeFW/CI.md
CVE: CVE-2024-31811
Published: 2024-04-08
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the langType parameter in the setLanguageCfg function.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_1_setLanguageCfg/CI.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_1_setLanguageCfg/CI.md
CVE: CVE-2024-31812
Published: 2024-04-08
Description: In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-75
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_getWiFiExtenderConfig/Leak.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_getWiFiExtenderConfig/Leak.md
CVE: CVE-2024-31813
Published: 2024-04-08
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default.
CVSS Score: 8.4 (HIGH)
CWE: CWE-862
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Missing_Authentication/missauth.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Missing_Authentication/missauth.md
CVE: CVE-2024-31814
Published: 2024-04-08
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to bypass login through the Form_Login function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-288
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Login_Bypass/bypass.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Login_Bypass/bypass.md
CVE: CVE-2024-31815
Published: 2024-04-08
Description: In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_ExportSettings/Leak.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_ExportSettings/Leak.md
CVE: CVE-2024-31816
Published: 2024-04-08
Description: In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_getEasyWizardCfg/Leak.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_getEasyWizardCfg/Leak.md
CVE: CVE-2024-31817
Published: 2024-04-08
Description: In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_getSysStatusCfg/Leak.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/Leak_getSysStatusCfg/Leak.md
CVE: CVE-2024-28732
Published: 2024-04-08
Description: An issue was discovered in OFPMatch in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://gist.github.com/ErodedElk/1133d64dde2d92393a065edc9b243792; https://github.com/faucetsdn/ryu/issues/188; https://gist.github.com/ErodedElk/1133d64dde2d92393a065edc9b243792
CVE: CVE-2024-2511
Published: 2024-04-08
Description: Issue summary: Some non-default TLS server configurations can cause unbounded
memory growth when processing TLSv1.3 sessions

Impact summary: An attacker may exploit certain server configurations to trigger
unbounded memory growth that would lead to a Denial of Service

This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is
being used (but not if early_data support is also configured and the default
anti-replay protection is in use). In this case, under certain conditions, the
session cache can get into an incorrect state and it will fail to flush properly
as it fills. The session cache will continue to grow in an unbounded manner. A
malicious client could deliberately create the scenario for this failure to
force a Denial of Service. It may also happen by accident in normal operation.

This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS
clients.

The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL
1.0.2 is also not affected by this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1325
References: https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce; https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d; https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08
CVE: CVE-2024-3440
Published: 2024-04-08
Description: A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/edit_profile.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259693 was assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemSQL3.md; https://vuldb.com/?ctiid.259693; https://vuldb.com/?id.259693
CVE: CVE-2024-3441
Published: 2024-04-08
Description: A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Employee/edit-profile.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259694 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemSQL4.md; https://vuldb.com/?ctiid.259694; https://vuldb.com/?id.259694
CVE: CVE-2024-30269
Published: 2024-04-08
Description: DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the `/de2api/engine/getEngine;.js` path via a browser reveals that the platform's database configuration is returned. The vulnerability has been fixed in v2.5.0. No known workarounds are available aside from upgrading.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/dataease/dataease/releases/tag/v2.5.0; https://github.com/dataease/dataease/security/advisories/GHSA-8gvx-4qvj-6vv5; https://github.com/dataease/dataease/releases/tag/v2.5.0
CVE: CVE-2024-31205
Published: 2024-04-08
Description: Saleor is an e-commerce platform. Starting in version 3.10.0 and prior to versions 3.14.64, 3.15.39, 3.16.39, 3.17.35, 3.18.31, and 3.19.19, an attacker may bypass cross-set request forgery (CSRF) validation when calling refresh token mutation with empty string. When a user provides an empty string in `refreshToken` mutation, while the token persists in `JWT_REFRESH_TOKEN_COOKIE_NAME` cookie, application omits validation against CSRF token and returns valid access token. Versions 3.14.64, 3.15.39, 3.16.39, 3.17.35, 3.18.31, and 3.19.19 contain a patch for the issue. As a workaround, one may replace `saleor.graphql.account.mutations.authentication.refresh_token.py.get_refresh_token`. This will fix the issue, but be aware, that it returns `JWT_MISSING_TOKEN` instead of `JWT_INVALID_TOKEN`.

CVSS Score: 4.2 (MEDIUM)
CWE: CWE-352
References: https://github.com/saleor/saleor/commit/36699c6f5c99590d24f46e3d5c5b1a3c2fd072e7; https://github.com/saleor/saleor/security/advisories/GHSA-ff69-fwjf-3c9w; https://github.com/saleor/saleor/commit/36699c6f5c99590d24f46e3d5c5b1a3c2fd072e7
CVE: CVE-2024-31221
Published: 2024-04-08
Description: Sunshine is a self-hosted game stream host for Moonlight. Starting in version 0.10.0 and prior to version 0.23.0, after unpairing all devices in the web UI interface and then pairing only one device, all of the previously devices will be temporarily paired. Version 0.23.0 contains a patch for the issue. As a workaround, restarting Sunshine after unpairing all devices prevents the vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-384
References: https://github.com/LizardByte/Sunshine/commit/b7aa8119f1471844dccdf73a8b6f7efc9baddb5e; https://github.com/LizardByte/Sunshine/issues/2305; https://github.com/LizardByte/Sunshine/pull/2365
CVE: CVE-2024-3442
Published: 2024-04-08
Description: A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an unknown part of the file /Employee/delete_leave.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259695.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemSQL5.md; https://vuldb.com/?ctiid.259695; https://vuldb.com/?id.259695
CVE: CVE-2024-3443
Published: 2024-04-08
Description: A vulnerability classified as problematic was found in SourceCodester Prison Management System 1.0. This vulnerability affects unknown code of the file /Employee/apply_leave.php. The manipulation of the argument txtstart_date/txtend_date leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259696.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/zyairelai/CVE-submissions/blob/main/prison-xss.md; https://vuldb.com/?ctiid.259696; https://vuldb.com/?id.259696
CVE: CVE-2024-3444
Published: 2024-04-08
Description: A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an unknown part of the file /?g=net_pro_keyword_import_save. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259701 was assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://github.com/h0e4a0r1t/lLGcmVjGkR/blob/main/Wangshen%20SecGata%203600%20Firewall%20net_pro_keyword_import_save%20arbitrary%20file%20upload%20vulnerability.pdf; https://vuldb.com/?ctiid.259701; https://vuldb.com/?id.259701