deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-68118
Published: 2025-12-17
Description: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.0, a vulnerability exists in FreeRDP’s certificate handling code on Windows platforms. The function `freerdp_certificate_data_hash_ uses` the Microsoft-specific `_snprintf` function to format certificate cache filenames without guaranteeing NUL termination when truncation occurs. According to Microsoft documentation, `_snprintf` does not append a terminating NUL byte if the formatted output exceeds the destination buffer size. If an attacker controls the hostname value (for example via server redirection or a crafted .rdp file), the resulting filename buffer may not be NUL-terminated. Subsequent string operations performed on this buffer may read beyond the allocated memory region, resulting in a heap-based out-of-bounds read. In default configurations, the connection is typically terminated before sensitive data can be meaningfully exposed, but unintended memory read or a client crash may still occur under certain conditions. Version 3.20.0 has a patch for the issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/FreeRDP/FreeRDP/commit/a0b21f992a9de1de2468fc9e600aa2b7a4066307; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h78c-5cjx-jw6x
CVE: CVE-2025-68129
Published: 2025-12-17
Description: Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. In applications built with the Auth0-PHP SDK, the audience validation in access tokens is performed improperly. Without proper validation, affected applications may accept ID tokens as Access tokens. Projects are affected if they use Auth0-PHP SDK versions between v8.0.0 and v8.17.0, or applications using the following SDKs that rely on the Auth0-PHP SDK versions between v8.0.0 and v8.17.0: Auth0/symfony versions between 5.0.0 and 5.5.0, Auth0/laravel-auth0 versions between 7.0.0 and 7.19.0, and/or Auth0/wordpress plugin versions between 5.0.0-BETA0 and 5.4.0. Auth0/Auth0-PHP version 8.18.0 contains a patch for the issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863
References: https://github.com/auth0/auth0-PHP/commit/7fe700053aee609718460c123f00f53c511f0f7f; https://github.com/auth0/auth0-PHP/releases/tag/8.18.0; https://github.com/auth0/auth0-PHP/security/advisories/GHSA-j2vm-wrq3-f7gf
CVE: CVE-2025-68275
Published: 2025-12-17
Description: ChurchCRM is an open-source church management system. Versions prior to 6.5.3 have a stored cross-site scripting vulnerability on the pages `View Active People`, `View Inactive people`, and `View All People`. Version 6.5.3 fixes the issue.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/ChurchCRM/CRM/security/advisories/GHSA-3q97-q4hv-gxwr; https://github.com/ChurchCRM/CRM/security/advisories/GHSA-3q97-q4hv-gxwr
CVE: CVE-2025-68399
Published: 2025-12-17
Description: ChurchCRM is an open-source church management system. In versions prior to 6.5.4, there is a Stored Cross-Site Scripting (XSS) vulnerability within the GroupEditor.php page of the application. When a user attempts to create a group role, they can execute malicious JavaScript. However, for this to work, the user must have permission to view and modify groups in the application. Version 6.5.4 fixes the issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/ChurchCRM/CRM/security/advisories/GHSA-gfxf-w4cg-c54j; https://github.com/ChurchCRM/CRM/security/advisories/GHSA-gfxf-w4cg-c54j
CVE: CVE-2025-68400
Published: 2025-12-17
Description: ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in the legacy endpoint `/Reports/ConfirmReportEmail.php` in ChurchCRM prior to version 6.5.3. Although the feature was removed from the UI, the file remains deployed and reachable directly via URL. This is a classic case of *dead but reachable code*. Any authenticated user - including one with zero assigned permissions - can exploit SQL injection through the `familyId` parameter. Version 6.5.3 fixes the issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/ChurchCRM/CRM/security/advisories/GHSA-v54g-2pvg-gvp2; https://github.com/ChurchCRM/CRM/security/advisories/GHSA-v54g-2pvg-gvp2
CVE: CVE-2025-68401
Published: 2025-12-17
Description: ChurchCRM is an open-source church management system. Prior to version 6.0.0, the application stores user-supplied HTML/JS without sufficient sanitization/encoding. When other users later view this content, attacker-controlled JavaScript executes in their browser (stored XSS). In affected contexts the script can access web origin data and perform privileged actions as the victim. Where session cookies are not marked HttpOnly, the script can read document.cookie, enabling session theft and account takeover. Version 6.0.0 patches the issue.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/ChurchCRM/CRM/security/advisories/GHSA-phfw-p278-qq7v; https://github.com/ChurchCRM/CRM/security/advisories/GHSA-phfw-p278-qq7v
CVE: CVE-2023-53904
Published: 2025-12-17
Description: Xenforo 2.2.13 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the smilie category title parameter. Attackers can create a smilie category with a malicious script that will execute when the admin panel is loaded, potentially enabling further client-side attacks.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51547; https://www.vulncheck.com/advisories/xenforo-authenticated-stored-cross-site-scripting-via-smilie-categories; https://xenforo.com/
CVE: CVE-2023-53905
Published: 2025-12-17
Description: ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile names. Attackers can craft payloads like =calc|a!z| in the name field to trigger code execution when administrators export action logs as CSV files.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: https://www.exploit-db.com/exploits/51517; https://www.projectsend.org/; https://www.vulncheck.com/advisories/projectsend-csv-injection-via-user-account-export-functionality
CVE: CVE-2023-53906
Published: 2025-12-17
Description: projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript through the custom assets configuration page. Attackers can craft a JavaScript payload in the custom assets section that will execute when other users load the affected page, enabling persistent script injection.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51518; https://www.projectsend.org/; https://www.vulncheck.com/advisories/projectsend-stored-cross-site-scripting-via-custom-assets-page
CVE: CVE-2023-53907
Published: 2025-12-17
Description: Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.bludit.com; https://www.exploit-db.com/exploits/51541; https://www.vulncheck.com/advisories/bludit-authenticated-arbitrary-file-download-via-backup-plugin
CVE: CVE-2023-53908
Published: 2025-12-17
Description: HiSecOS 04.0.01 contains a privilege escalation vulnerability that allows authenticated users to modify their access role through XML-based NETCONF configuration. Attackers can send crafted XML payloads to the /mops_data endpoint with a specific role value to elevate their user privileges to administrative level.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.belden.com/products/industrial-networking-cybersecurity/software-solutions/device-software/hisecos-firewall-software; https://www.exploit-db.com/exploits/51537; https://www.vulncheck.com/advisories/hisecos-privilege-escalation-via-user-role-modification
CVE: CVE-2023-53909
Published: 2025-12-17
Description: WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by uploading crafted SVG files through the media manager. Attackers can upload SVG files containing script tags to the /wbce/modules/elfinder/ef/php/connector.wbce.php endpoint and execute JavaScript when victims access the uploaded file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wbce-cms.org/; https://www.exploit-db.com/exploits/51484; https://www.vulncheck.com/advisories/wbce-cms-svg-file-content-cross-site-scripting
CVE: CVE-2023-53910
Published: 2025-12-17
Description: WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by inserting script tags into page content through the WYSIWYG editor. Attackers can submit POST requests to /wbce/modules/wysiwyg/save.php with malicious script content in the content parameter to execute JavaScript when users view the affected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wbce-cms.org/; https://www.exploit-db.com/exploits/51484; https://www.vulncheck.com/advisories/wbce-cms-stored-cross-site-scripting-via-page-content
CVE: CVE-2023-53911
Published: 2025-12-17
Description: Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://textpattern.com/; https://www.exploit-db.com/exploits/51523; https://www.vulncheck.com/advisories/textpattern-cms-authenticated-stored-cross-site-scripting-via-article-excerpt
CVE: CVE-2023-53912
Published: 2025-12-17
Description: USB Flash Drives Control 4.1.0.0 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\USB Flash Drives Control\usbcs.exe' to inject malicious executables and escalate privileges on Windows systems.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-428
References: https://binisoft.org/; https://www.exploit-db.com/exploits/51508; https://www.vulncheck.com/advisories/usb-flash-drives-control-unquoted-service-path-privilege-escalation
CVE: CVE-2023-53913
Published: 2025-12-17
Description: Rukovoditel 3.3.1 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into the firstname field. Attackers can craft payloads like =calc|a!z| to trigger code execution when an admin exports customer data as a CSV file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://www.exploit-db.com/exploits/51490; https://www.rukovoditel.net/; https://www.vulncheck.com/advisories/rukovoditel-csv-injection-via-user-account-export
CVE: CVE-2023-53914
Published: 2025-12-17
Description: UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assignment in the UserController. Attackers can send a crafted POST request to the admin index.php endpoint with specific parameters to generate an administrative account with full system access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639
References: https://web.archive.org/web/[PII_REDACTED]3734/https://en.ulicms.de/; https://www.exploit-db.com/exploits/51486; https://www.vulncheck.com/advisories/ulicms-authentication-bypass-via-mass-assignment-vulnerability
CVE: CVE-2023-53915
Published: 2025-12-17
Description: Zenphoto 1.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserting HTML content into album descriptions. Attackers can create albums with malicious iframe or script tags in the description field that execute when users view the album page.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51485; https://www.vulncheck.com/advisories/zenphoto-stored-cross-site-scripting-via-album-description; https://www.zenphoto.org/news/zenphoto-1.6/
CVE: CVE-2023-53916
Published: 2025-12-17
Description: Zenphoto 1.6 contains a stored cross-site scripting vulnerability in the user postal code field accessible through the admin-users.php interface. When administrators view user information imported as HTML, malicious JavaScript payloads injected into the postal code field execute in their browser context.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51485; https://www.vulncheck.com/advisories/zenphoto-stored-cross-site-scripting-via-user-postal-code-field; https://www.zenphoto.org/news/zenphoto-1.6/
CVE: CVE-2023-53917
Published: 2025-12-17
Description: Affiliate Me version 5.0.1 contains a SQL injection vulnerability in the admin.php endpoint that allows authenticated administrators to manipulate database queries. Attackers can exploit the 'id' parameter with crafted union-based queries to extract sensitive user information including usernames and password hashes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/51468; https://www.powerstonegh.com/; https://www.vulncheck.com/advisories/affiliate-me-sql-injection-vulnerability-via-admin-panel
CVE: CVE-2023-53918
Published: 2025-12-17
Description: PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php). Malicious JavaScript payloads injected into episode titles execute when administrators view the episodes list page (episodes_list.php).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://podcastgenerator.net/; https://www.exploit-db.com/exploits/51454; https://www.vulncheck.com/advisories/podcastgenerator-stored-cross-site-scripting-via-episode-title-field
CVE: CVE-2023-53919
Published: 2025-12-17
Description: PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php). Malicious JavaScript payloads injected into the Freebox content execute when users visit the application's home page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://podcastgenerator.net/; https://www.exploit-db.com/exploits/51454; https://www.vulncheck.com/advisories/podcastgenerator-stored-cross-site-scripting-via-freebox-content-field
CVE: CVE-2023-53920
Published: 2025-12-17
Description: PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Malicious JavaScript payloads injected into the podcast title execute when users visit the application's home page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://podcastgenerator.net/; https://www.exploit-db.com/exploits/51454; https://www.vulncheck.com/advisories/podcastgenerator-stored-cross-site-scripting-via-podcast-title-field
CVE: CVE-2023-53921
Published: 2025-12-17
Description: SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://sitemagic.org/Download.html; https://www.exploit-db.com/exploits/51464; https://www.vulncheck.com/advisories/sitemagiccms-remote-code-execution-via-unrestricted-file-upload
CVE: CVE-2023-53922
Published: 2025-12-17
Description: TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files. Attackers can upload .phar files with embedded system commands to execute arbitrary code on the server by accessing the uploaded file's URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.tinywebgallery.com/; https://www.exploit-db.com/exploits/51443; https://www.vulncheck.com/advisories/tinywebgallery-remote-code-execution-via-unrestricted-file-upload
CVE: CVE-2023-53923
Published: 2025-12-17
Description: UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through the UserController endpoint. Attackers can send a crafted POST request to /dist/admin/index.php with specific parameters to generate a new admin user with full system access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://web.archive.org/web/[PII_REDACTED]3734/https://en.ulicms.de/; https://www.exploit-db.com/exploits/51433; https://www.vulncheck.com/advisories/ulicms-privilege-escalation-via-unauthenticated-admin-account-creation
CVE: CVE-2023-53924
Published: 2025-12-17
Description: UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution through maliciously crafted avatar uploads.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://web.archive.org/web/[PII_REDACTED]3734/https://en.ulicms.de/; https://www.exploit-db.com/exploits/51434; https://www.vulncheck.com/advisories/ulicms-sniffing-vicuna-remote-code-execution-via-avatar-upload
CVE: CVE-2023-53925
Published: 2025-12-17
Description: UliCMS 2023.1 contains a stored cross-site scripting vulnerability that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG files through the file management interface that execute arbitrary scripts when viewed by other users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://web.archive.org/web/[PII_REDACTED]3734/https://en.ulicms.de/; https://www.exploit-db.com/exploits/51435; https://www.vulncheck.com/advisories/ulicms-stored-cross-site-scripting-via-svg-file-upload
CVE: CVE-2023-53926
Published: 2025-12-17
Description: PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' parameter in the index.php endpoint to potentially extract or modify database information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/51416; https://www.phpjabbers.com/faq.php; https://www.vulncheck.com/advisories/phpjabbers-simple-cms-sql-injection-via-column-parameter
CVE: CVE-2023-53927
Published: 2025-12-17
Description: PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through section name parameters. Attackers can create sections with embedded JavaScript payloads that will execute when administrators view the sections, potentially enabling client-side code execution.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51415; https://www.phpjabbers.com/; https://www.vulncheck.com/advisories/phpjabbers-simple-cms-stored-cross-site-scripting-via-section-creation
CVE: CVE-2023-53928
Published: 2025-12-17
Description: PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload SVG files with script tags that execute arbitrary JavaScript when viewed, potentially stealing user session information or performing client-side attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51411; https://www.phpfusion.com/index.php; https://www.vulncheck.com/advisories/phpfusion-stored-cross-site-scripting-via-file-manager-upload
CVE: CVE-2023-53929
Published: 2025-12-17
Description: phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like 'calc|a!z|' to trigger code execution when an administrator exports user data as a CSV file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://www.exploit-db.com/exploits/51399; https://www.phpmyfaq.de/; https://www.vulncheck.com/advisories/phpmyfaq-csv-injection-via-user-profile-export
CVE: CVE-2023-53930
Published: 2025-12-17
Description: ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files by manipulating the download ID parameter. Attackers can access any user's private files by changing the 'id' parameter in the download request to process.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://www.exploit-db.com/exploits/51400; https://www.projectsend.org/; https://www.vulncheck.com/advisories/projectsend-insecure-direct-object-reference-file-download-vulnerability
CVE: CVE-2023-53931
Published: 2025-12-17
Description: Revive Adserver 5.4.1 contains a cross-site scripting vulnerability in the banner advanced configuration page that allows attackers to inject malicious scripts. Attackers can craft a malicious link to the banner-advanced.php endpoint with XSS payloads in prepend and append parameters to execute arbitrary JavaScript when an admin views the page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51401; https://www.revive-adserver.com/; https://www.vulncheck.com/advisories/revive-adserver-cross-site-scripting-via-banner-advanced-settings
CVE: CVE-2023-53932
Published: 2025-12-17
Description: Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.s9y.org/; https://www.exploit-db.com/exploits/51373; https://www.vulncheck.com/advisories/serendipity-stored-cross-site-scripting-via-admin-entry-creation
CVE: CVE-2023-53933
Published: 2025-12-17
Description: Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension. Attackers can upload files with system command payloads to the media upload endpoint and execute arbitrary commands on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://docs.s9y.org/; https://www.exploit-db.com/exploits/51372; https://www.vulncheck.com/advisories/serendipity-authenticated-remote-code-execution-via-file-upload
CVE: CVE-2025-14268
Published: 2025-12-17
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-14319
Published: 2025-12-17
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-14833
Published: 2025-12-17
Description: A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/Sqli22/Sqli/issues/2; https://vuldb.com/?ctiid.336982