deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-31271
Published: 2024-02-14
Description: Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html
CVE: CVE-2023-32280
Published: 2024-02-14
Description: Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html
CVE: CVE-2023-32618
Published: 2024-02-14
Description: Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00956.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00956.html
CVE: CVE-2023-32642
Published: 2024-02-14
Description: Insufficient adherence to expected conventions for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1076
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-32644
Published: 2024-02-14
Description: Protection mechanism failure for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-693
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-32646
Published: 2024-02-14
Description: Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html
CVE: CVE-2023-32647
Published: 2024-02-14
Description: Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00955.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00955.html
CVE: CVE-2023-32651
Published: 2024-02-14
Description: Improper validation of specified type of input for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-33870
Published: 2024-02-14
Description: Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277, CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00993.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00993.html
CVE: CVE-2023-33875
Published: 2024-02-14
Description: Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via local access..
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-34315
Published: 2024-02-14
Description: Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html
CVE: CVE-2023-34351
Published: 2024-02-14
Description: Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-124, CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00954.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00954.html
CVE: CVE-2023-34983
Published: 2024-02-14
Description: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-35003
Published: 2024-02-14
Description: Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-249, CWE-22
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html
CVE: CVE-2023-35060
Published: 2024-02-14
Description: Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00987.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00987.html
CVE: CVE-2023-35061
Published: 2024-02-14
Description: Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-35062
Published: 2024-02-14
Description: Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00969.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00969.html
CVE: CVE-2023-35121
Published: 2024-02-14
Description: Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version  2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access.


CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html
CVE: CVE-2023-35769
Published: 2024-02-14
Description: Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00959.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00959.html
CVE: CVE-2023-36490
Published: 2024-02-14
Description: Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00967.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00967.html
CVE: CVE-2023-36493
Published: 2024-02-14
Description: Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00992.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00992.html
CVE: CVE-2023-38135
Published: 2024-02-14
Description: Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-285
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00958.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00958.html
CVE: CVE-2023-38561
Published: 2024-02-14
Description: Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00955.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00955.html
CVE: CVE-2023-38566
Published: 2024-02-14
Description: Uncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00994.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00994.html
CVE: CVE-2023-39425
Published: 2024-02-14
Description: Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00969.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00969.html
CVE: CVE-2023-39432
Published: 2024-02-14
Description: Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00993.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00993.html
CVE: CVE-2023-39932
Published: 2024-02-14
Description: Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01004.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01004.html
CVE: CVE-2023-39941
Published: 2024-02-14
Description: Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00998.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00998.html
CVE: CVE-2023-40154
Published: 2024-02-14
Description: Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01004.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01004.html
CVE: CVE-2023-40156
Published: 2024-02-14
Description: Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01011.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01011.html
CVE: CVE-2023-40161
Published: 2024-02-14
Description: Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00981.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00981.html
CVE: CVE-2023-41090
Published: 2024-02-14
Description: Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 1.8 (LOW)
CWE: CWE-421, CWE-362
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00967.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00967.html
CVE: CVE-2023-41091
Published: 2024-02-14
Description: Uncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01005.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01005.html
CVE: CVE-2023-41231
Published: 2024-02-14
Description: Incorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00913.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00913.html
CVE: CVE-2023-41252
Published: 2024-02-14
Description: Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01000.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01000.html
CVE: CVE-2023-42776
Published: 2024-02-14
Description: Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01014.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01014.html
CVE: CVE-2023-6441
Published: 2024-02-14
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection.This issue affects University Information System: before 12.12.2023.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-24-0102; https://www.usom.gov.tr/bildirim/tr-24-0102
CVE: CVE-2023-46186
Published: 2024-02-14
Description: IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls.  IBM X-Force ID:  269929.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/269929; https://www.ibm.com/support/pages/node/7116830; https://exchange.xforce.ibmcloud.com/vulnerabilities/269929
CVE: CVE-2023-5122
Published: 2024-02-14
Description: Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this plugin was configured to send requests to a bare host with no path (e.g.  https://www.example.com/ https://www.example.com/` ), requests to an endpoint other than the one configured by the administrator could be triggered by a specially crafted request from any user, resulting in an SSRF vector. AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://grafana.com/security/security-advisories/cve-2023-5122/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://grafana.com/security/security-advisories/cve-2023-5122/
CVE: CVE-2023-5123
Published: 2024-02-14
Description: The JSON datasource plugin ( https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ ) is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint (including a specific sub-path) configured by an administrator. Due to inadequate sanitization of the dashboard-supplied path parameter, it was possible to include path traversal characters (../) in the path parameter and send requests to paths on the configured endpoint outside the configured sub-path. 





    
    
            






    
    
            This means that if the datasource was configured by an administrator to point at some sub-path of a domain (e.g.  https://example.com/api/some_safe_api/ ), it was possible for an editor to create a dashboard referencing the datasource which issues queries containing path traversal characters, which would in turn cause the datasource to instead query arbitrary subpaths on the configured domain (e.g.  https://example.com/api/admin_api/) .

In the rare case that this plugin is configured by an administrator to point back at the Grafana instance itself, this vulnerability becomes considerably more severe, as an administrator browsing a maliciously configured panel could be compelled to make requests to Grafana administrative API endpoints with their credentials, resulting in the potential for privilege escalation, hence the high score for this vulnerability.
CVSS Score: 8.0 (HIGH)
CWE: CWE-22
References: https://grafana.com/security/security-advisories/cve-2023-5123/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://grafana.com/security/security-advisories/cve-2023-5123/
CVE: CVE-2024-25207
Published: 2024-02-14
Description: Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Contact Number parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20XSS-2.md; https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20XSS-2.md
CVE: CVE-2024-25208
Published: 2024-02-14
Description: Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20XSS-1.md; https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20XSS-1.md
CVE: CVE-2024-25209
Published: 2024-02-14
Description: Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20SQL%20Injection.md; https://github.com/BurakSevben/CVEs/blob/main/Barangay%20Population%20Monitoring%20System/Barangay%20Population%20System%20-%20SQL%20Injection.md
CVE: CVE-2024-25210
Published: 2024-02-14
Description: Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BurakSevben/CVEs/blob/main/Simple%20Expense%20Tracker/Simple%20Expense%20Tacker%20-%20SQL%20Injection-1.md; https://github.com/BurakSevben/CVEs/blob/main/Simple%20Expense%20Tracker/Simple%20Expense%20Tacker%20-%20SQL%20Injection-1.md
CVE: CVE-2024-25211
Published: 2024-02-14
Description: Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_category.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BurakSevben/CVEs/blob/main/Simple%20Expense%20Tracker/Simple%20Expense%20Tracker%20-%20SQL%20Injection-2.md; https://github.com/BurakSevben/CVEs/blob/main/Simple%20Expense%20Tracker/Simple%20Expense%20Tracker%20-%20SQL%20Injection-2.md
CVE: CVE-2024-25212
Published: 2024-02-14
Description: Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/BurakSevben/CVEs/blob/main/Employee%20Management%20System/Employee%20Managment%20System%20-%20SQL%20Injection%20-%204.md; https://github.com/BurakSevben/CVEs/blob/main/Employee%20Management%20System/Employee%20Managment%20System%20-%20SQL%20Injection%20-%204.md