deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24923
Published: 2022-01-24
Description: The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.25 does not escape the sib-statistics-date parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3afef591-9e00-4af8-a8a6-e04ec5e61795; https://wpscan.com/vulnerability/3afef591-9e00-4af8-a8a6-e04ec5e61795
CVE: CVE-2021-24936
Published: 2022-01-24
Description: The WP Extra File Types WordPress plugin before 0.5.1 does not have CSRF check when saving its settings, nor sanitise and escape some of them, which could allow attackers to make a logged in admin change them and perform Cross-Site Scripting attacks
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/4fb61b84-ff5f-4b4c-a516-54b749f9611e; https://wpscan.com/vulnerability/4fb61b84-ff5f-4b4c-a516-54b749f9611e
CVE: CVE-2021-24965
Published: 2022-01-24
Description: The Five Star Restaurant Reservations WordPress plugin before 2.4.8 does not have capability and CSRF checks in the rtb_welcome_set_schedule AJAX action, allowing any authenticated users to call it. Due to the lack of sanitisation and escaping, users with a role as low as subscriber could perform Cross-Site Scripting attacks against logged in admins
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/306ecf09-fdf0-449c-930c-9dfa58f0efc2; https://wpscan.com/vulnerability/306ecf09-fdf0-449c-930c-9dfa58f0efc2
CVE: CVE-2021-24968
Published: 2022-01-24
Description: The Ultimate FAQ WordPress plugin before 2.1.2 does not have capability and CSRF checks in the ewd_ufaq_welcome_add_faq and ewd_ufaq_welcome_add_faq_page AJAX actions, available to any authenticated users. As a result, any users, with a role as low as Subscriber could create FAQ and FAQ questions
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-862, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2648562; https://wpscan.com/vulnerability/f0a9e6cc-46cc-4ac2-927a-c006b8e8aa68; https://plugins.trac.wordpress.org/changeset/2648562
CVE: CVE-2021-24974
Published: 2022-01-24
Description: The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue (which will be triggered in the admin dashboard) due to the lack of escaping.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8ed549fe-7d27-4a7a-b226-c20252964b29; https://wpscan.com/vulnerability/8ed549fe-7d27-4a7a-b226-c20252964b29
CVE: CVE-2021-24976
Published: 2022-01-24
Description: The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2637305; https://wpscan.com/vulnerability/7d5f58a8-bee4-46be-9c08-d272678338f0; https://plugins.trac.wordpress.org/changeset/2637305
CVE: CVE-2021-24985
Published: 2022-01-24
Description: The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2646017; https://wpscan.com/vulnerability/50be0ebf-fe6d-41e5-8af9-0d74f33aeb57; https://plugins.trac.wordpress.org/changeset/2646017
CVE: CVE-2021-24989
Published: 2022-01-24
Description: The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure that the post to be deleted belongs to the plugin, allowing attackers to make a logged in admin delete arbitrary posts from the blog
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/82c2ead1-1d3c-442a-ae68-359a4748447f; https://wpscan.com/vulnerability/82c2ead1-1d3c-442a-ae68-359a4748447f
CVE: CVE-2021-25008
Published: 2022-01-24
Description: The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/cb232354-f74d-48bb-b437-7bdddd1df42a; https://wpscan.com/vulnerability/cb232354-f74d-48bb-b437-7bdddd1df42a
CVE: CVE-2021-25013
Published: 2022-01-24
Description: The Qubely WordPress plugin before 1.7.8 does not have authorisation and CSRF check on the qubely_delete_saved_block AJAX action, and does not ensure that the block to be deleted belong to the plugin, as a result, any authenticated users, such as subscriber can delete arbitrary posts
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-352
References: https://wpscan.com/vulnerability/e88b7a70-ee71-439f-b3c6-0300adb980b0; https://wpscan.com/vulnerability/e88b7a70-ee71-439f-b3c6-0300adb980b0
CVE: CVE-2021-25015
Published: 2022-01-24
Description: The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the history dashboard page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2648350/mycred; https://wpscan.com/vulnerability/7608829d-2820-49e2-a10e-e93eb3005f68; https://plugins.trac.wordpress.org/changeset/2648350/mycred
CVE: CVE-2021-25017
Published: 2022-01-24
Description: The Tutor LMS WordPress plugin before 1.9.12 does not escape the search parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2643821; https://wpscan.com/vulnerability/2d0c4872-a341-4974-926c-10b094a5d13c; https://plugins.trac.wordpress.org/changeset/2643821
CVE: CVE-2021-25028
Published: 2022-01-24
Description: The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/80b0682e-2c3b-441b-9[PII_REDACTED]e5fc7; https://wpscan.com/vulnerability/80b0682e-2c3b-441b-9[PII_REDACTED]e5fc7
CVE: CVE-2021-25031
Published: 2022-01-24
Description: The Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) WordPress plugin before 9.7.1 does not escape the effects parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2648086; https://wpscan.com/vulnerability/1fbcf5ec-498e-4d40-8577-84b8c7ac3201; https://plugins.trac.wordpress.org/changeset/2648086
CVE: CVE-2021-25035
Published: 2022-01-24
Description: The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2641264; https://wpscan.com/vulnerability/f426360e-5ba0-4d6b-bfd4-61bc54be3469; https://plugins.trac.wordpress.org/changeset/2641264
CVE: CVE-2021-25045
Published: 2022-01-24
Description: The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forum_id parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2642215; https://wpscan.com/vulnerability/c60a3d40-449c-4c84-8d13-68c04267c1d7; https://plugins.trac.wordpress.org/changeset/2642215
CVE: CVE-2021-25049
Published: 2022-01-24
Description: The Mobile Events Manager WordPress plugin before 1.4.4 does not sanitise and escape various of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2647987; https://wpscan.com/vulnerability/227cbf50-59da-4f4c-85da-1959a108ae7e; https://plugins.trac.wordpress.org/changeset/2647987
CVE: CVE-2021-25062
Published: 2022-01-24
Description: The Orders Tracking for WooCommerce WordPress plugin before 1.1.10 does not sanitise and escape the file_url before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2643807; https://wpscan.com/vulnerability/dc9a5d36-7453-46a8-a17f-712449d7987d; https://plugins.trac.wordpress.org/changeset/2643807
CVE: CVE-2021-25073
Published: 2022-01-24
Description: The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/2647594; https://wpscan.com/vulnerability/922a2037-9b5e-4c94-83d9-99efc494e9e2; https://plugins.trac.wordpress.org/changeset/2647594
CVE: CVE-2021-25074
Published: 2022-01-24
Description: The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/f3c0a155-9563-4533-97d4-03b9bac83164; https://wpscan.com/vulnerability/f3c0a155-9563-4533-97d4-03b9bac83164
CVE: CVE-2021-25076
Published: 2022-01-24
Description: The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL injection. Due to the lack of sanitisation and escaping, this could also lead to Reflected Cross-Site Scripting
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/166071/WordPress-WP-User-Frontend-3.5.25-SQL-Injection.html; https://plugins.trac.wordpress.org/changeset/2648715; https://wpscan.com/vulnerability/6d3eeba6-5560-4380-a6e9-f008a9112ac6
CVE: CVE-2021-25078
Published: 2022-01-24
Description: The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admin viewing the tracked requests.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2648196; https://wpscan.com/vulnerability/d4edb5f2-aa1b-4e2d-abb4-76c46def6c6e; https://plugins.trac.wordpress.org/changeset/2648196
CVE: CVE-2021-25079
Published: 2022-01-24
Description: The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and escape various parameters, such as form_id, status, end_date, order, orderby and search before outputting them back in the admin page
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2629442; https://wpscan.com/vulnerability/c3d49271-9656-4428-8357-0d1d77b7fc63; https://plugins.trac.wordpress.org/changeset/2629442
CVE: CVE-2021-25080
Published: 2022-01-24
Description: The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved via headers such as CLIENT-IP and X-FORWARDED-FOR, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against logged in admins viewing the created entry
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2450335; https://wpscan.com/vulnerability/acd3d98a-aab8-49be-b77e-e8c6ede171ac; https://plugins.trac.wordpress.org/changeset/2450335
CVE: CVE-2021-25083
Published: 2022-01-24
Description: The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it back in an attribute in the settings page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2648377; https://wpscan.com/vulnerability/9b69544d-6a08-4757-901b-6ccf1cd00ecc; https://plugins.trac.wordpress.org/changeset/2648377
CVE: CVE-2022-0269
Published: 2022-01-24
Description: Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://github.com/yetiforcecompany/yetiforcecrm/commit/298c7870e6fe4332d8aa1757a9c8d79f841389ff; https://huntr.dev/bounties/a0470915-f6df-45b8-b3a2-01aebe764df0; https://github.com/yetiforcecompany/yetiforcecrm/commit/298c7870e6fe4332d8aa1757a9c8d79f841389ff
CVE: CVE-2021-44981
Published: 2022-01-24
Description: In QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter value and parses it into a shell_exec(''); function without properly sanitizing any shell arguments, therefore remote code execution is possible. Additionally, as the media server is running as root by default attackers can use the sudo command within this shell_exec(''); function, which allows for privilege escalation by means of RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/QuickBox/QB/issues/202; https://websec.nl/blog/61b2b37a43a1155c848f3b08/websec%20finds%20critical%20vulnerabilities%20in%20popular%20media%20server; https://github.com/QuickBox/QB/issues/202
CVE: CVE-2022-22296
Published: 2022-01-24
Description: Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint. Simply change the value and data of other users can be displayed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://github.com/vlakhani28/CVE-2022-22296/blob/main/README.md; https://github.com/vlakhani28/CVE-2022-22296/blob/main/README.md
CVE: CVE-2021-40596
Published: 2022-01-24
Description: SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the faculty_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-07; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-07
CVE: CVE-2021-40907
Published: 2022-01-24
Description: SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-08-09072021; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-08-09072021
CVE: CVE-2021-40908
Published: 2022-01-24
Description: SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-09; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-09
CVE: CVE-2022-23437
Published: 2022-01-24
Description: There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.openwall.com/lists/oss-security/2022/01/24/3; https://lists.apache.org/thread/6pjwm10bb69kq955fzr1n0nflnjd27dl; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-40909
Published: 2022-01-24
Description: Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-10-09102021; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-10-09102021
CVE: CVE-2021-41471
Published: 2022-01-24
Description: SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-12-09162021; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-12-09162021
CVE: CVE-2021-41472
Published: 2022-01-24
Description: SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/razormist; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/razormist
CVE: CVE-2021-4088
Published: 2022-01-24
Description: SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server with privilege escalation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-89, CWE-89
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10376; https://kc.mcafee.com/corporate/index?page=content&id=SB10376
CVE: CVE-2021-41658
Published: 2022-01-24
Description: Cross Site Scripting (XSS) in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-15-092121; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-15-092121
CVE: CVE-2021-35005
Published: 2022-01-24
Description: This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer service. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated array. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-13818.
CVSS Score: 3.3 (LOW)
CWE: CWE-129, CWE-125
References: https://community.teamviewer.com/English/discussion/117794/august-updates-security-patches; https://www.zerodayinitiative.com/advisories/ZDI-22-082/; https://community.teamviewer.com/English/discussion/117794/august-updates-security-patches
CVE: CVE-2021-41659
Published: 2022-01-24
Description: SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-16-092421; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-16-092421
CVE: CVE-2021-41660
Published: 2022-01-24
Description: SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-06-092421; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-06-092421
CVE: CVE-2021-41929
Published: 2022-01-24
Description: Cross Site Scripting (XSS) in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers to execute arbitrary code via the about page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-19-302021; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-19-302021
CVE: CVE-2021-41928
Published: 2022-01-24
Description: SQL injection in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) 1.0 by oretnom23, allows attackers to execute arbitrary code via the rid parameter to the view_recipe page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-17-092921; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-17-092921
CVE: CVE-2021-41930
Published: 2022-01-24
Description: Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-18-09-2821; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-18-09-2821
CVE: CVE-2021-42168
Published: 2022-01-24
Description: Cross Site Scripting (XSS) in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the login_registration page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-17-092921; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-17-092921
CVE: CVE-2021-43420
Published: 2022-01-24
Description: SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/main/vendors/oretnom23/CVE-NU11-2021-1101/README.MD; https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/main/vendors/oretnom23/CVE-NU11-2021-1101/README.MD
CVE: CVE-2022-23126
Published: 2022-01-24
Description: TeslaMate before 1.25.1 (when using the default Docker configuration) allows attackers to open doors of Tesla vehicles, start Keyless Driving, and interfere with vehicle operation en route. This occurs because an attacker can leverage Grafana login access to obtain a token for Tesla API calls.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/adriankumpf/teslamate/commit/fff6915e7364f83b3030f980d5743299c4e5260d; https://github.com/adriankumpf/teslamate/compare/v1.25.0...v1.25.1; https://github.com/adriankumpf/teslamate/releases/tag/v1.25.1