deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25705
Published: 2020-11-17
Description: A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version
CVSS Score: 7.4 (HIGH)
CWE: CWE-330, CWE-330
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03
CVE: CVE-2020-25832
Published: 2020-11-17
Description: Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to perform Reflected XSS attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03763396; https://softwaresupport.softwaregrp.com/doc/KM03763396
CVE: CVE-2020-25833
Published: 2020-11-17
Description: Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03763397; https://softwaresupport.softwaregrp.com/doc/KM03763397
CVE: CVE-2020-27192
Published: 2020-11-17
Description: BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allowed a local attacker to inject code into ForkLift. This would allow the attacker to run malicious code with escalated privileges through ForkLift's helper tool.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://insinuator.net/2020/11/forklift-lpe/; https://insinuator.net/2020/11/forklift-lpe/
CVE: CVE-2020-27125
Published: 2020-11-17
Description: A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker could exploit this vulnerability by viewing source code. A successful exploit could allow the attacker to view static credentials, which the attacker could use to carry out further attacks.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-rce-8gjUz9fW; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-rce-8gjUz9fW
CVE: CVE-2020-27130
Published: 2020-11-17
Description: A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to download arbitrary files from the affected device.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-35
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-path-trav-NgeRnqgR; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-path-trav-NgeRnqgR
CVE: CVE-2020-27131
Published: 2020-11-17
Description: Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit these vulnerabilities by sending a malicious serialized Java object to a specific listener on an affected system. A successful exploit could allow the attacker to execute arbitrary commands on the device with the privileges of NT AUTHORITY\SYSTEM on the Windows target host. Cisco has not released software updates that address these vulnerabilities.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-502
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-java-rce-mWJEedcD; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-java-rce-mWJEedcD
CVE: CVE-2020-7774
Published: 2020-11-17
Description: The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://github.com/yargs/y18n/issues/96; https://github.com/yargs/y18n/pull/108
CVE: CVE-2020-25746
Published: 2020-11-17
Description: QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable), aka wireless password visibility.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/878641153/v1.40.9; https://www.resourcexpress.com/meeting-room-booking-systems/hardware/qubi3/; https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/878641153/v1.40.9
CVE: CVE-2020-28647
Published: 2020-11-17
Description: In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload within the application. If a victim within the MOVEit Transfer instance interacts with the stored payload, it could invoke and execute arbitrary code within the context of the victim's browser (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://community.progress.com/s/article/MOVEit-Transfer-Vulnerability-Nov-2020; https://labs.secforce.com/posts/progress-moveit-transfer-2020.1-stored-xss-cve-2020-28647/; https://www.progress.com/
CVE: CVE-2020-28687
Published: 2020-11-17
Description: The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/; https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html; https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/
CVE: CVE-2020-28688
Published: 2020-11-17
Description: The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/; https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html; https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/
CVE: CVE-2020-7841
Published: 2020-11-17
Description: Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto://
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35789; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35789
CVE: CVE-2020-21665
Published: 2020-11-17
Description: In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/karsonzhang/fastadmin/commit/e14008ca029d644e2486873fa22629a1d62a7380; https://github.com/karsonzhang/fastadmin/commit/e14008ca029d644e2486873fa22629a1d62a7380
CVE: CVE-2020-25798
Published: 2020-11-17
Description: A stored cross-site scripting (XSS) vulnerability in LimeSurvey before and including 3.21.1 allows authenticated users with correct permissions to inject arbitrary web script or HTML via parameter ParticipantAttributeNamesDropdown of the Attributes on the central participant database page. When the survey attribute being edited or viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.limesurvey.org/view.php?id=15672; https://github.com/LimeSurvey/LimeSurvey/commit/38e1ab069b538de7cb5f3a04939aba8e835640cb; https://bugs.limesurvey.org/view.php?id=15672
CVE: CVE-2020-27553
Published: 2020-11-17
Description: In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows an attacker with network access to the web-server to download any files from the “/etc” folder without authentication. No path traversal sequences are needed to exploit this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns; https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE: CVE-2020-27554
Published: 2020-11-17
Description: Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-522
References: https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns; https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE: CVE-2020-27555
Published: 2020-11-17
Description: Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns; https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE: CVE-2020-27556
Published: 2020-11-17
Description: A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns; https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE: CVE-2020-27557
Published: 2020-11-17
Description: Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns; https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE: CVE-2020-27558
Published: 2020-11-17
Description: Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns; https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE: CVE-2020-13958
Published: 2020-11-17
Description: A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can be triggered unconditionally. In fixed versions no internal protocol may be called from the document event handler and other hyperlinks require a control-click.
CVSS Score: 7.8 (HIGH)
References: https://lists.apache.org/thread.html/r6b2f48cf6c4aad4ebd13f[PII_REDACTED]6b0ccae63bea2d3d89cdaf355%40%3Cannounce.openoffice.apache.org%3E; https://lists.apache.org/thread.html/r6b2f48cf6c4aad4ebd13f[PII_REDACTED]6b0ccae63bea2d3d89cdaf355%40%3Cannounce.openoffice.apache.org%3E
CVE: CVE-2020-13350
Published: 2020-11-17
Description: CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runners. Affected versions are >=13.5.0, <13.5.2,>=13.4.0, <13.4.5,<13.3.9.
CVSS Score: 3.1 (LOW)
CWE: CWE-352
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13350.json; https://gitlab.com/gitlab-org/gitlab/-/issues/24416; https://hackerone.com/reports/415238
CVE: CVE-2020-13351
Published: 2020-11-17
Description: Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names and values for scheduled pipelines on projects visible to the attacker. Affected versions are >=13.0, <13.3.9,>=13.4.0, <13.4.5,>=13.5.0, <13.5.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13351.json; https://gitlab.com/gitlab-org/gitlab/-/issues/239369; https://hackerone.com/reports/962462
CVE: CVE-2020-25400
Published: 2020-11-17
Description: Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data such as access token.
CVSS Score: 7.5 (HIGH)
References: https://github.com/JordanKnott/taskcafe; https://github.com/JordanKnott/taskcafe
CVE: CVE-2020-26701
Published: 2020-11-17
Description: Cross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows remote attackers to inject malicious web scripts or HTML Injection payloads via the Description parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160082/Kaa-IoT-Platform-1.2.0-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/160082/Kaa-IoT-Platform-1.2.0-Cross-Site-Scripting.html
CVE: CVE-2020-13348
Published: 2020-11-17
Description: An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch without the CODEOWNERS file. Affected versions are >=10.2, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
CVSS Score: 5.7 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13348.json; https://gitlab.com/gitlab-org/gitlab/-/issues/246928; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13348.json
CVE: CVE-2020-13349
Published: 2020-11-17
Description: An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13349.json; https://gitlab.com/gitlab-org/gitlab/-/issues/257497; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13349.json
CVE: CVE-2020-26405
Published: 2020-11-17
Description: Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations. Affected versions are >=12.8, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26405.json; https://gitlab.com/gitlab-org/gitlab/-/issues/247371; https://hackerone.com/reports/835427
CVE: CVE-2020-28138
Published: 2020-11-17
Description: SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/48429; https://www.sourcecodester.com/php/14185/online-clothing-store.html; https://www.exploit-db.com/exploits/48429
CVE: CVE-2020-28139
Published: 2020-11-17
Description: SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/48426; https://www.sourcecodester.com/php/14185/online-clothing-store.html; https://www.exploit-db.com/exploits/48426
CVE: CVE-2020-28140
Published: 2020-11-17
Description: SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/48438; https://www.sourcecodester.com/php/14185/online-clothing-store.html; https://www.exploit-db.com/exploits/48438
CVE: CVE-2020-25988
Published: 2020-11-17
Description: UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H) has an action 'X_GetAccess' which leaks the credentials of 'admin', provided that the attacker is network adjacent.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://github.com/ideaengine007/RandomStuffs/blob/main/Version_Vulnerable.PNG; https://medium.com/%40niteshsurana/424f0db73129; https://www.exploit-db.com/exploits/49075
CVE: CVE-2020-28133
Published: 2020-11-17
Description: An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/48879; https://www.sourcecodester.com/php/14461/simple-grocery-store-sales-and-inventory-system-using-phpmysql-source-code.html; https://www.exploit-db.com/exploits/48879
CVE: CVE-2020-28136
Published: 2020-11-17
Description: An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://phpgurukul.com/tourism-management-system-free-download/; https://www.exploit-db.com/exploits/48892; https://phpgurukul.com/tourism-management-system-free-download/
CVE: CVE-2020-25890
Published: 2020-11-17
Description: The web application of Kyocera printer (ECOSYS M2640IDW) is affected by Stored XSS vulnerability, discovered in the addition a new contact in "Machine Address Book". Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://vitor-santos.medium.com/xss-in-kyocera-printer-ecosys-m2640idw-cf6d3bc525e3; https://vitor-santos.medium.com/xss-in-kyocera-printer-ecosys-m2640idw-cf6d3bc525e3
CVE: CVE-2020-26216
Published: 2020-11-17
Description: TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting. Three XSS vulnerabilities have been detected in Fluid: 1. TagBasedViewHelper allowed XSS through maliciously crafted additionalAttributes arrays by creating keys with attribute-closing quotes followed by HTML. When rendering such attributes, TagBuilder would not escape the keys. 2. ViewHelpers which used the CompileWithContentArgumentAndRenderStatic trait, and which declared escapeOutput = false, would receive the content argument in unescaped format. 3. Subclasses of AbstractConditionViewHelper would receive the then and else arguments in unescaped format. Update to versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 or 2.6.10 of this typo3fluid/fluid package that fix the problem described. More details are available in the linked advisory.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://github.com/TYPO3/Fluid/commit/f20db4e74cf9803c6cffca2ed2f03e1b0b89d0dc; https://github.com/TYPO3/Fluid/security/advisories/GHSA-hpjm-3ww5-6cpf; https://typo3.org/security/advisory/typo3-core-sa-2020-009
CVE: CVE-2020-26548
Published: 2020-11-17
Description: An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can execute all commands as any user on the system.
CVSS Score: 8.8 (HIGH)
References: https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE: CVE-2020-26549
Published: 2020-11-17
Description: An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests to directories can be bypassed for file downloading.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE: CVE-2020-26550
Published: 2020-11-17
Description: An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated systems is protected by a three-character key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE: CVE-2020-26551
Published: 2020-11-17
Description: An issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored in a readable file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE: CVE-2020-26552
Published: 2020-11-17
Description: An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints, do not require a valid session ID for access.
CVSS Score: 7.5 (HIGH)
References: https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE: CVE-2020-26553
Published: 2020-11-17
Description: An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE: CVE-2020-28129
Published: 2020-11-17
Description: Stored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php?page=packages via vulnerable fields 'Package Name' and 'Description'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/48941; https://www.sourcecodester.com/php/14541/gym-management-system-using-phpmysqli-source-code.html; https://www.exploit-db.com/exploits/48941
CVE: CVE-2020-28130
Published: 2020-11-17
Description: An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos (under the web root).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/48928; https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html; https://www.exploit-db.com/exploits/48928
CVE: CVE-2020-28092
Published: 2020-11-17
Description: PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id=
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160128/PESCMS-TEAM-2.3.2-Cross-Site-Scripting.html; https://github.com/lazyphp/PESCMS-TEAM/issues/6; http://packetstormsecurity.com/files/160128/PESCMS-TEAM-2.3.2-Cross-Site-Scripting.html