deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-4013
Published: 2022-11-16
Description: A vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an unknown functionality of the file appointment.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213787.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-352
References: https://github.com/golamsarwar08/hms/issues/2; https://vuldb.com/?id.213787; https://github.com/golamsarwar08/hms/issues/2
CVE: CVE-2022-4014
Published: 2022-11-16
Description: A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this vulnerability is VDB-213788.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-352
References: https://vuldb.com/?id.213788; https://vuldb.com/?id.213788
CVE: CVE-2022-4015
Published: 2022-11-16
Description: A vulnerability, which was classified as critical, was found in Sports Club Management System 119. This affects an unknown part of the file admin/make_payments.php. The manipulation of the argument m_id/plan leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213789 was assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://github.com/shreyansh225/Sports-Club-Management-System/issues/6; https://vuldb.com/?id.213789; https://github.com/shreyansh225/Sports-Club-Management-System/issues/6
CVE: CVE-2022-45047
Published: 2022-11-16
Description: Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.mail-archive.com/dev%40mina.apache.org/msg39312.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-24036
Published: 2022-11-16
Description: Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to modificate logs.
CVSS Score: 8.6 (HIGH)
CWE: CWE-284
References: https://karmasis.com/urunlerimiz/infraskope-siem/; https://www.usom.gov.tr/bildirim/tr-22-0691; https://karmasis.com/urunlerimiz/infraskope-siem/
CVE: CVE-2022-3980
Published: 2022-11-16
Description: An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20221116-smc-xee; https://www.sophos.com/en-us/security-advisories/sophos-sa-20221116-smc-xee
CVE: CVE-2022-4018
Published: 2022-11-16
Description: Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095; https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5; https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095
CVE: CVE-2022-4021
Published: 2022-11-16
Description: The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.20.1. This is due to missing or incorrect nonce validation on the extra_actions function. This makes it possible for unauthenticated attackers to change plugin settings including permalinks and site maps, via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2818142#file34; https://www.wordfence.com/threat-intel/vulnerabilities/id/1718f2eb-6235-498f-8c1e-402c1caf7d02?source=cve; https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-4021
CVE: CVE-2022-4022
Published: 2022-11-16
Description: The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malicious javascript are not sanitized. While version 2.5 adds the ability to sanitize image as they are uploaded, the plugin defaults to disable sanitization and does not restrict SVG upload to only administrators. This allows authenticated attackers, with author-level privileges and higher, to upload malicious SVG files that can be embedded in posts and pages by higher privileged users. Additionally, the embedded JavaScript is also triggered on visiting the image URL, which allows an attacker to execute malicious code in browsers visiting that URL.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2776612%40svg-support%2Ftrunk&old=2672900%40svg-support%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-4022; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2776612%40svg-support%2Ftrunk&old=2672900%40svg-support%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2022-43234
Published: 2022-11-16
Description: An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/havok89/Hoosk/issues/64; https://github.com/havok89/Hoosk/issues/64
CVE: CVE-2022-43256
Published: 2022-11-16
Description: SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/seacms-com/seacms/issues/23; https://github.com/seacms-com/seacms/issues/23
CVE: CVE-2022-43262
Published: 2022-11-16
Description: Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/null302/bug_report/blob/main/vendors/oretnom23/Human%20Resource%20Management%20System/SQLi-1.md; https://github.com/null302/bug_report/blob/main/vendors/oretnom23/Human%20Resource%20Management%20System/SQLi-1.md
CVE: CVE-2022-43263
Published: 2022-11-16
Description: A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.pizzapower.me/2022/10/11/guitar-pro-directory-traversal-and-filename-xss/; https://www.pizzapower.me/2022/10/11/guitar-pro-directory-traversal-and-filename-xss/
CVE: CVE-2022-43264
Published: 2022-11-16
Description: Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.pizzapower.me/2022/10/11/guitar-pro-directory-traversal-and-filename-xss/; https://www.pizzapower.me/2022/10/11/guitar-pro-directory-traversal-and-filename-xss/
CVE: CVE-2022-44069
Published: 2022-11-16
Description: Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/4; https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/4
CVE: CVE-2022-44070
Published: 2022-11-16
Description: Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/3; https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/3
CVE: CVE-2022-44071
Published: 2022-11-16
Description: Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/5; https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/5
CVE: CVE-2022-44073
Published: 2022-11-16
Description: Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/6; https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/6
CVE: CVE-2022-34354
Published: 2022-11-16
Description: 
IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.


CVSS Score: 4.0 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230424; https://www.ibm.com/support/pages/node/6839751; https://exchange.xforce.ibmcloud.com/vulnerabilities/230424
CVE: CVE-2022-39316
Published: 2022-11-16
Description: FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has been addressed in the 2.9.0 release. Users are advised to upgrade.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/FreeRDP/FreeRDP/commit/e865c24efc40ebc52e75979c94cdd4ee2c1495b0; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5w4j-mrrh-jjrm; https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
CVE: CVE-2022-39320
Published: 2022-11-16
Description: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qfq2-82qr-7f4j; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/
CVE: CVE-2022-39347
Published: 2022-11-16
Description: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.
CVSS Score: 2.6 (LOW)
CWE: CWE-22, CWE-22
References: https://github.com/FreeRDP/FreeRDP/commit/027424c2c6c0991cb9c22f[PII_REDACTED]c9b17e5d; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c5xq-8v35-pffg; https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
CVE: CVE-2022-39383
Published: 2022-11-16
Description: KubeVela is an open source application delivery platform. Users using the VelaUX APIServer could be affected by this vulnerability. When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Users who're using v1.6, please update the v1.6.1. Users who're using v1.5, please update the v1.5.8. There are no known workarounds for this issue.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://github.com/kubevela/kubevela/pull/5000; https://github.com/kubevela/kubevela/security/advisories/GHSA-m5xf-x7q6-3rm7; https://github.com/kubevela/kubevela/pull/5000
CVE: CVE-2022-41877
Published: 2022-11-16
Description: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119, CWE-1284
References: https://github.com/FreeRDP/FreeRDP/commit/6655841cf2a00b764f855040aecb8803cfc5eaba; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pmv3-wpw4-pw5h; https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
CVE: CVE-2022-41914
Published: 2022-11-16
Description: Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity Management(SCIM) account management enabled, Zulip Server 5.0 through 5.6 checked the SCIM bearer token using a comparator that did not run in constant time. Therefore, it might theoretically be possible for an attacker to infer the value of the token by performing a sophisticated timing analysis on a large number of failing requests. If successful, this would allow the attacker to impersonate the SCIM client for its abilities to read and update user accounts in the Zulip organization. Organizations where SCIM account management has not been enabled are not affected.
CVSS Score: 3.7 (LOW)
CWE: CWE-200, CWE-203
References: https://github.com/zulip/zulip/commit/59edbfa4113d140d3e20126bc65f4d67b2a8ffe5; https://github.com/zulip/zulip/security/advisories/GHSA-q5gx-377v-w76f; https://github.com/zulip/zulip/commit/59edbfa4113d140d3e20126bc65f4d67b2a8ffe5
CVE: CVE-2022-43135
Published: 2022-11-16
Description: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/junHVV/bug_report/blob/main/vendors/mayuri_k/Online%20Diagnostic%20Lab%20Management%20System/SQLi-1.md; https://github.com/junHVV/bug_report/blob/main/vendors/mayuri_k/Online%20Diagnostic%20Lab%20Management%20System/SQLi-1.md
CVE: CVE-2022-39317
Published: 2022-11-16
Description: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. This issue has been addressed in version 2.9.0. There are no known workarounds for this issue.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99cm-4gw7-c8jh; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/
CVE: CVE-2022-39318
Published: 2022-11-16
Description: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in version 2.9.0. All users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20, CWE-369, CWE-369
References: https://github.com/FreeRDP/FreeRDP/commit/80adde17ddc4b596ed1dae0922a0c54ab3d4b8ea; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-387j-8j96-7q35; https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
CVE: CVE-2022-39319
Published: 2022-11-16
Description: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/FreeRDP/FreeRDP/commit/11555828d2cf289b350baba5ad1f462f10b80b76; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvxm-wfj2-5fvh; https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
CVE: CVE-2022-43999
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to exposed CORBA management services, arbitrary system commands can be executed on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-034.txt; https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-034.txt
CVE: CVE-2022-44007
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attacker to trick users into opening an authenticated user session for a session identifier known to the attacker, aka Session Fixation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384, CWE-384
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-036.txt; https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-036.txt
CVE: CVE-2022-44008
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary local files can be retrieved by accessing the back-end Tomcat server directly.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-037.txt; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-037.txt
CVE: CVE-2022-40752
Published: 2022-11-16
Description: IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID:  236687.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/236687; https://www.ibm.com/support/pages/node/6833566; https://exchange.xforce.ibmcloud.com/vulnerabilities/236687
CVE: CVE-2022-44000
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to an exposed internal communications interface, it is possible to execute arbitrary system commands on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-913, CWE-306, CWE-913
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-032.txt; https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-032.txt
CVE: CVE-2022-44002
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient output encoding of user-supplied data, the web application is vulnerable to cross-site scripting (XSS) at various locations.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037; https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037
CVE: CVE-2022-44003
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the application is vulnerable to SQL injection at various locations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-029.txt; https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-029.txt
CVE: CVE-2022-44004
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthenticated attackers can complete the password-reset process for any account and set a new password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640, CWE-640
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-030.txt; https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-030.txt
CVE: CVE-2022-44005
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in verification links, the newsletter sign-up functionality is vulnerable to the enumeration of subscribers' e-mail addresses. Furthermore, it is possible to subscribe and verify other persons' e-mail addresses to newsletters without their consent.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-026.txt; https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-026.txt
CVE: CVE-2022-44006
Published: 2022-11-16
Description: An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames, an externally reachable, unauthenticated update function permits writing files outside the intended target location. Achieving remote code execution is possible, e.g., by uploading an executable file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-031.txt; https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-031.txt
CVE: CVE-2021-38819
Published: 2022-11-17
Description: A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the album page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/m4sk0ff/CVE-2021-38819/blob/main/CVE-2021-38819.md; https://github.com/m4sk0ff/CVE-2021-38819/blob/main/CVE-2021-38819.md
CVE: CVE-2022-42960
Published: 2022-11-17
Description: EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.imperva.com/blog/vulnerability-discovered-in-equalweb-accessibility-widget/; https://www.imperva.com/blog/vulnerability-discovered-in-equalweb-accessibility-widget/