rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-29278 
Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory. This issue was discovered by Insyde during security review. Fixed in: Kernel 5.1: Version 05.17.23 Kernel 5.2: Version 05.27.23 Kernel 5.3: Version 05.36.23 Kernel 5.4: Version 05.44.23 Kernel 5.5: Version 05.52.23 https://www.insyde.com/security-pledge/SA-2022061
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-15T00:00:00.000Z
CVE-2022-29279 
Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.17 Kernel 5.1: version 05.17.17 Kernel 5.2: version 05.27.17 Kernel 5.3: version 05.36.17 Kernel 5.4: version 05.44.17 Kernel 5.5: version 05.52.17 https://www.insyde.com/security-pledge/SA-2022062
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-15T00:00:00.000Z
CVE-2022-29281 
Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI scheme. A hyperlink to an SMB share could lead to execution of an arbitrary program (or theft of NTLM credentials via an SMB relay attack, because the application resolves UNC paths).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T20:41:14.000Z
CVE-2022-29286 
Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T21:04:14.000Z
CVE-2022-29287 
Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator) to export the user options of any user, even ones with higher privileges (like Global Administrators) than the current user. The exported XML contains every option of the exported user (even the hashed password).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:H/S:U/UI:N
version: 3.1
Published: 2022-04-15T23:52:42.000Z
CVE-2022-29296 
A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T22:55:57.000Z
CVE-2022-29298 
SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T15:17:13.000Z
CVE-2022-29302 
SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T15:17:14.000Z
CVE-2022-29303 
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T15:17:16.000Z
CVE-2022-29304 
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-19T20:40:21.000Z
CVE-2022-29305 
imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T02:10:06.000Z
CVE-2022-29306 
IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T15:34:25.000Z
CVE-2022-29307 
IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T15:34:25.000Z
CVE-2022-29309 
mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T02:17:11.000Z
CVE-2022-29315 
Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-19T14:57:59.000Z
CVE-2022-29316 
Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advancesearch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T12:58:29.000Z
CVE-2022-29317 
Simple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection vulnerbilities via the username and password parameters at /assets/partials/_handleLogin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T12:58:29.000Z
CVE-2022-29318 
An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T12:58:30.000Z
CVE-2022-29320 
MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-20T12:53:18.000Z
CVE-2022-29321 
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:52.000Z
CVE-2022-29322 
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:53.000Z
CVE-2022-29323 
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:51.000Z
CVE-2022-29324 
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:50.000Z
CVE-2022-29325 
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:50.000Z
CVE-2022-29326 
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:49.000Z
CVE-2022-29327 
D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:54.000Z
CVE-2022-29328 
D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:48.000Z
CVE-2022-29329 
D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T13:16:48.000Z
CVE-2022-29330 
Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T15:20:01.000Z
CVE-2022-29332 
D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's root folder for FTP access. This allows you to access the entire router file system via the FTP server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-17T13:39:59.000Z
CVE-2022-29333 
A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T20:55:51.000Z
CVE-2022-29334 
An issue in H v1.0 allows attackers to bypass authentication via a session replay attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T21:05:53.000Z
CVE-2022-29337 
C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T21:26:31.000Z
CVE-2022-29339 
In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T12:44:58.000Z
CVE-2022-29340 
GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of GF_SKIP_BOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T12:46:44.000Z
CVE-2022-29347 
An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T14:28:43.000Z
CVE-2022-29349 
kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T23:21:51.000Z
CVE-2022-29351 
An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T13:28:55.000Z
CVE-2022-29353 
An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T13:28:43.000Z
CVE-2022-29354 
An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T13:28:42.000Z
CVE-2022-29358 
epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in _parse_special_tag at sxmlc.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T23:36:47.000Z
CVE-2022-29359 
A stored cross-site scripting (XSS) vulnerability in /scas/?page=clubs/application_form&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T23:44:15.000Z
CVE-2022-29360 
The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-28T00:00:00.000Z
CVE-2022-29361 
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T23:56:15.000Z
CVE-2022-29362 
A cross-site scripting (XSS) vulnerability in /navigation/create?ParentID=%23 of ZKEACMS v3.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ParentID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T00:01:06.000Z
CVE-2022-29363 
Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. This vulnerability allows attackers to getshell via writing arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T17:15:20.000Z
CVE-2022-29368 
Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T18:48:42.000Z
CVE-2022-29369 
Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T18:48:42.000Z
CVE-2022-29376 
Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-23T20:16:04.000Z
CVE-2022-29377 
Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the parameter CONTENT_LENGTH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-24T01:24:07.000Z
CVE-2022-29379 
Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2, 0.7.3, or 0.7.4 release
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T12:56:33.000Z
CVE-2022-29380 
Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T13:14:07.000Z
CVE-2022-29383 
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T12:49:40.000Z
CVE-2022-29391 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:49:56.000Z
CVE-2022-29392 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:49:56.000Z
CVE-2022-29393 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004192cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:49:57.000Z
CVE-2022-29394 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:49:58.000Z
CVE-2022-29395 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:49:59.000Z
CVE-2022-29396 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:49:59.000Z
CVE-2022-29397 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:50:00.000Z
CVE-2022-29398 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:50:01.000Z
CVE-2022-29399 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-10T19:50:01.000Z
CVE-2022-29402 
TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:P/A:H/C:H/I:H/PR:N/S:U/UI:N
version: 3.1
Published: 2022-05-25T17:24:29.000Z
CVE-2022-29404 Denial of service in mod_lua r:parsebody
In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size.
Problem types: cwe_id: CWE-770
description: CWE-770: Allocation of Resources Without Limits or Throttling
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue
Published: 2022-06-08T10:00:52.000Z
CVE-2022-29405 Apache Archiva Arbitrary user password reset vulnerability
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
Problem types: description: Apache Archiva Arbitrary user password reset vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache Archiva
Published: 2022-05-25T07:15:11.000Z
CVE-2022-29406 WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in DynamicWebLab's WordPress Team Manager plugin <= 1.6.9 at WordPress.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: DynamicWebLab
product: WordPress Team Manager (WordPress plugin)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.1
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Vulnerability discovered by Ngo Van Thien (Patchstack Alliance)
Published: 2022-06-15T13:14:22.499Z
CVE-2022-29408 WordPress Advanced Contact form 7 DB plugin <= 1.8.7 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability
Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Vsourz Digital
product: Advanced Contact form 7 DB (WordPress plugin)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Vulnerability discovered by BEE-K (Patchstack)
Published: 2022-05-25T15:58:26.224Z
CVE-2022-29410 WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers with Subscriber or higher user roles to execute SQLi attack via (&ids).
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Mufeng
product: Hermit 音乐播放器 (WordPress plugin)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Vulnerability discovered by Lenon Leite (Patchstack Alliance)
Published: 2022-04-28T16:14:10.469Z
CVE-2022-29411 WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Unauthenticated SQL Injection SQLi) vulnerability
SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id).
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Mufeng
product: Hermit 音乐播放器 (WordPress plugin)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Vulnerability discovered by Lenon Leite (Patchstack Alliance)
Published: 2022-04-28T16:20:29.169Z