deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-0061
Published: 2023-02-13
Description: The Judge.me Product Reviews for WooCommerce WordPress plugin before 1.3.21 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/a1d0d131-c773-487e-88f8-e3d63936fbbb; https://wpscan.com/vulnerability/a1d0d131-c773-487e-88f8-e3d63936fbbb
CVE: CVE-2023-0075
Published: 2023-02-13
Description: The Amazon JS WordPress plugin through 0.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/097acd6f-3291-4cdc-a054-4432b6350411; https://wpscan.com/vulnerability/097acd6f-3291-4cdc-a054-4432b6350411
CVE: CVE-2023-0080
Published: 2023-02-13
Description: The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to include arbitrary files via a traversal attack. This could also allow them to read non PHP files and retrieve their content. RCE could also be achieved if the attacker manage to upload a malicious image containing PHP code, and then include it via the affected attribute, on a default WP install, authors could easily achieve that given that they have the upload_file capability.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/6b0d63ed-e244-4f20-8f10-a6e0c7ccadd4; https://wpscan.com/vulnerability/6b0d63ed-e244-4f20-8f10-a6e0c7ccadd4
CVE: CVE-2023-0098
Published: 2023-02-13
Description: The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/db0b3275-40df-404e-aa8d-53558f0122d8; https://wpscan.com/vulnerability/db0b3275-40df-404e-aa8d-53558f0122d8
CVE: CVE-2023-0099
Published: 2023-02-13
Description: The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
References: http://packetstormsecurity.com/files/176983/WordPress-Simple-URLs-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/fd50f2d6-e420-4220-b485-73f33227e8f8; http://packetstormsecurity.com/files/176983/WordPress-Simple-URLs-Cross-Site-Scripting.html
CVE: CVE-2023-0151
Published: 2023-02-13
Description: The uTubeVideo Gallery WordPress plugin before 2.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d9fc6f5f-efc1-4e23-899b-e9a49330ed13; https://wpscan.com/vulnerability/d9fc6f5f-efc1-4e23-899b-e9a49330ed13
CVE: CVE-2023-0159
Published: 2023-02-13
Description: The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809; https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809
CVE: CVE-2023-0166
Published: 2023-02-13
Description: The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/f5d43062-4ef3-4dd1-b916-0127f0016f5c; https://wpscan.com/vulnerability/f5d43062-4ef3-4dd1-b916-0127f0016f5c
CVE: CVE-2023-0169
Published: 2023-02-13
Description: The Zoho Forms WordPress plugin before 3.0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/178d71f2-4666-4f7e-ada5-cb72a50fd663; https://wpscan.com/vulnerability/178d71f2-4666-4f7e-ada5-cb72a50fd663
CVE: CVE-2023-0177
Published: 2023-02-13
Description: The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/712c2154-37f4-424c-ba3b-26ba6aa95bca; https://wpscan.com/vulnerability/712c2154-37f4-424c-ba3b-26ba6aa95bca
CVE: CVE-2023-0220
Published: 2023-02-13
Description: The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL statement, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/d6d976be-31d1-419d-8729-4a36fbd2755c; https://wpscan.com/vulnerability/d6d976be-31d1-419d-8729-4a36fbd2755c
CVE: CVE-2023-0255
Published: 2023-02-13
Description: The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/b0239208-1e23-4774-9b8c-9611704a07a0; https://wpscan.com/vulnerability/b0239208-1e23-4774-9b8c-9611704a07a0
CVE: CVE-2023-0259
Published: 2023-02-13
Description: The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/d3bb0eac-1f4e-4191-8f3b-104a5bb54558; https://wpscan.com/vulnerability/d3bb0eac-1f4e-4191-8f3b-104a5bb54558
CVE: CVE-2023-0260
Published: 2023-02-13
Description: The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/9165d46b-2a27-4e83-a096-73ffe9057c80; https://wpscan.com/vulnerability/9165d46b-2a27-4e83-a096-73ffe9057c80
CVE: CVE-2023-0261
Published: 2023-02-13
Description: The WP TripAdvisor Review Slider WordPress plugin before 10.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/6a3b6752-8d72-4ab4-9d49-b722a947d2b0; https://wpscan.com/vulnerability/6a3b6752-8d72-4ab4-9d49-b722a947d2b0
CVE: CVE-2023-0262
Published: 2023-02-13
Description: The WP Airbnb Review Slider WordPress plugin before 3.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/5d8c28ac-a46c-45d3-acc9-2cd2e6356ba2; https://wpscan.com/vulnerability/5d8c28ac-a46c-45d3-acc9-2cd2e6356ba2
CVE: CVE-2023-0263
Published: 2023-02-13
Description: The WP Yelp Review Slider WordPress plugin before 7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/2b4a6459-3e49-4048-8a9f-d7bb350aa2f6; https://wpscan.com/vulnerability/2b4a6459-3e49-4048-8a9f-d7bb350aa2f6
CVE: CVE-2023-0270
Published: 2023-02-13
Description: The YaMaps for WordPress Plugin WordPress plugin before 0.6.26 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/ca3ca694-54ca-4e7e-82e6-33aa240754e1; https://wpscan.com/vulnerability/ca3ca694-54ca-4e7e-82e6-33aa240754e1
CVE: CVE-2023-0275
Published: 2023-02-13
Description: The Easy Accept Payments for PayPal WordPress plugin before 4.9.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/aab5d803-d621-4b12-a901-ff4447334d88; https://wpscan.com/vulnerability/aab5d803-d621-4b12-a901-ff4447334d88
CVE: CVE-2023-0333
Published: 2023-02-13
Description: The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/e86ff4d5-d549-4c71-b80e-6a9b3bfddbfc; https://wpscan.com/vulnerability/e86ff4d5-d549-4c71-b80e-6a9b3bfddbfc
CVE: CVE-2023-0360
Published: 2023-02-13
Description: The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/ba653457-415f-4ab3-a792-42640b59302b; https://wpscan.com/vulnerability/ba653457-415f-4ab3-a792-42640b59302b
CVE: CVE-2023-0362
Published: 2023-02-13
Description: Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/95ee3257-cfda-480d-b3f7-28235564cf6d; https://wpscan.com/vulnerability/95ee3257-cfda-480d-b3f7-28235564cf6d
CVE: CVE-2023-0373
Published: 2023-02-13
Description: The Lightweight Accordion WordPress plugin before 1.5.15 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fe60ea83-b584-465a-8128-b7358d8da3af; https://wpscan.com/vulnerability/fe60ea83-b584-465a-8128-b7358d8da3af
CVE: CVE-2023-0379
Published: 2023-02-13
Description: The Spotlight Social Feeds WordPress plugin before 1.4.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/14b4f0c5-c7b1-4ac4-8c9c-f8c35ca5de4a; https://wpscan.com/vulnerability/14b4f0c5-c7b1-4ac4-8c9c-f8c35ca5de4a
CVE: CVE-2023-0405
Published: 2023-02-13
Description: The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/3ca9ac21-2bce-4480-9079-b4045b261273; https://wpscan.com/vulnerability/3ca9ac21-2bce-4480-9079-b4045b261273
CVE: CVE-2022-3089
Published: 2023-02-13
Description: 




Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials in a file, which could allow an attacker to obtain cleartext usernames and passwords of the SmartServer. If the attacker obtains the file, then the credentials could be used to control the web user interface and file transfer protocol (FTP) server. 

 


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-798, CWE-312
References: https://www.cisa.gov/uscert/ics/advisories/icsa-23-037-01; https://www.cisa.gov/uscert/ics/advisories/icsa-23-037-01
CVE: CVE-2022-41134
Published: 2023-02-13
Description: Cross-Site Request Forgery (CSRF) in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plugin <= 1.0.15 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/optinly/wordpress-optinly-plugin-1-0-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/optinly/wordpress-optinly-plugin-1-0-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2022-48077
Published: 2023-02-13
Description: Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://gist.github.com/hax3xploit/3210813c7221f3ae505494da57f26cbc; https://github.com/hax3xploit/CVEs/blob/master/GenymotionDesktop.md; https://gist.github.com/hax3xploit/3210813c7221f3ae505494da57f26cbc
CVE: CVE-2023-0810
Published: 2023-02-13
Description: Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/btcpayserver/btcpayserver/commit/dffa6accb04df7b80bc584dedef22c9297292ce6; https://huntr.dev/bounties/a48414ea-63d9-453c-b3f3-2c927b71ec68; https://github.com/btcpayserver/btcpayserver/commit/dffa6accb04df7b80bc584dedef22c9297292ce6
CVE: CVE-2023-23948
Published: 2023-02-13
Description: The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in `FileContentProvider.kt`. This issue can lead to information disclosure. Two databases, `filelist` and `owncloud_database`, are affected. In version 3.0, the `filelist` database was deprecated. However, injections affecting `owncloud_database` remain relevant as of version 3.0. 
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/; https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/
CVE: CVE-2023-24804
Published: 2023-02-13
Description: The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosure when uploading the app’s internal files, and to arbitrary file write when uploading plain text files (although limited by the .txt extension). Version 3.0 fixes the reported bypasses.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/377107; https://owncloud.com/security-advisories/oc-sa-2023-001/; https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/
CVE: CVE-2023-25159
Published: 2023-02-13
Description: Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform. Nextcloud Server 24.0.x prior to 24.0.8 and 25.0.x prior to 25.0.1, Nextcloud Enterprise Server 24.0.x prior to 24.0.8 and 25.0.x prior to 25.0.1, and Nextcloud Office (Richdocuments) App 6.x prior to 6.3.1 and 7.x prior to 7.0.1 have previews accessible without a watermark. The download should be hidden and the watermark should get applied. This issue is fixed in Nextcloud Server 25.0.1 and 24.0.8, Nextcloud Enterprise Server 25.0.1 and 24.0.8, and  Nextcloud Office (Richdocuments) App 7.0.1 (for 25) and 6.3.1 (for 24). No known workarounds are available.
CVSS Score: 2.3 (LOW)
CWE: CWE-284
References: https://github.com/nextcloud/richdocuments/pull/2579; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-92g2-h5jv-jjmg; https://github.com/nextcloud/server/pull/34799
CVE: CVE-2023-22854
Published: 2023-02-13
Description: The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL parameters. A successful exploit could allow access to sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-839
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0001; https://www.mitel.com/support/security-advisories
CVE: CVE-2023-23551
Published: 2023-02-13
Description: 


Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code. 


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94
References: https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01; https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01
CVE: CVE-2023-23553
Published: 2023-02-13
Description: 
Control By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker. 


CVSS Score: 4.5 (MEDIUM)
CWE: CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01; https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01
CVE: CVE-2023-24619
Published: 2023-02-13
Description: Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versions are 22.3.12, 22.2.10, and 22.1.12.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://github.com/redpanda-data/redpanda/pull/8339; https://github.com/redpanda-data/redpanda/pull/8339
CVE: CVE-2022-45285
Published: 2023-02-13
Description: Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/IthacaLabs/Vsourz-Digital/blob/main/AdvancedContactForm_CF7_DB_XSS/; https://github.com/IthacaLabs/Vsourz-Digital/blob/main/AdvancedContactForm_CF7_DB_XSS/AdvancedContactForm_CF7_DB_XSS.txt; https://github.com/IthacaLabs/Vsourz-Digital/blob/main/AdvancedContactForm_CF7_DB_XSS/
CVE: CVE-2022-48110
Published: 2023-02-13
Description: CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator (who is adding CKEditor 5 functionality to a website) to choose the correct security settings for their use case. Also, safe default values are established (e.g., config.htmlEmbed.showPreviews is false).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html; https://packetstormsecurity.com/files/170927/CKSource-CKEditor5-35.4.0-Cross-Site-Scripting.html; https://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html
CVE: CVE-2023-24188
Published: 2023-02-13
Description: ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://ureport.com; https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24188.md; https://github.com/youseries/ureport
CVE: CVE-2023-25717
Published: 2023-02-13
Description: Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&[CREDENTIAL_REDACTED](curl substring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/; https://support.ruckuswireless.com/security_bulletins/315; https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/
CVE: CVE-2023-25718
Published: 2023-02-13
Description: In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a (different) attacker-controlled executable file. It is plausible that the end user may allow the download and execution of this file to proceed. There are ConnectWise Control configuration options that add mitigations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://cybir.com/2022/cve/connectwise-control-dns-spoofing-poc/; https://m.youtube.com/watch?v=fbNVUgmstSc&pp=0gcJCf0Ao7VqN5tD; https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures
CVE: CVE-2023-25719
Published: 2023-02-13
Description: ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector. NOTE: this CVE Record is only about the parameters, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed to have unique configurations across customers' installations).
CVSS Score: 8.8 (HIGH)
CWE: CWE-74, CWE-74
References: https://cybir.com/2022/cve/hijacking-connectwise-control-and-ddos/; https://m.youtube.com/watch?v=fbNVUgmstSc&pp=0gcJCf0Ao7VqN5tD; https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures
CVE: CVE-2022-45962
Published: 2023-02-13
Description: Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL Injection via CalendarModal.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://ccat.gitbook.io/cyber-sec/cve/cve-2022-45962-postauth-sqli; https://github.com/OS4ED/openSIS-Classic; https://github.com/OS4ED/openSIS-Classic/blob/381a1ad907285182c88e30b8bb6ce91123d9275d/CalendarModal.php#L30