rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-27235 WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities
Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.
Problem types: cwe_id: CWE-264
description: CWE-264 Permissions, Privileges, and Access Controls
Affected products: vendor: Supsystic
product: Social Share Buttons by Supsystic (WordPress plugin)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Vulnerability discovered by m0ze (Patchstack)
Published: 2022-07-22T16:43:11.114Z
CVE-2022-27237 
There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T04:32:44.000Z
CVE-2022-27238 
BigBlueButton version 2.4.7 (or earlier) is vulnerable to stored Cross-Site Scripting (XSS) in the private chat functionality. A threat actor could inject JavaScript payload in his/her username. The payload gets executed in the browser of the victim each time the attacker sends a private message to the victim or when notification about the attacker leaving room is displayed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T15:15:22.000Z
CVE-2022-27239 
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T00:00:00.000Z
CVE-2022-27240 
scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T05:55:25.000Z
CVE-2022-27241 
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structure. This could allow an unauthenticated remote attacker to read confidential information.
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Siemens
product: Mendix Applications using Mendix 7
vendor: Siemens
product: Mendix Applications using Mendix 8
vendor: Siemens
product: Mendix Applications using Mendix 9
vendor: Siemens
product: Mendix Applications using Mendix 9 (V9.6)
Published: 2022-04-12T09:08:00.000Z
CVE-2022-27242 
A vulnerability has been identified in OpenV2G (V0.9.4). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.
Problem types: cwe_id: CWE-120
description: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Siemens
product: OpenV2G
Published: 2022-05-10T09:47:00.000Z
CVE-2022-27243 
An issue was discovered in MISP before 2.4.156. app/View/Users/terms.ctp allows Local File Inclusion via the custom terms file setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T17:15:02.000Z
CVE-2022-27244 
An issue was discovered in MISP before 2.4.156. A malicious site administrator could store an XSS payload in the custom auth name. This would be executed each time the administrator modifies a user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T17:14:38.000Z
CVE-2022-27245 
An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T17:14:13.000Z
CVE-2022-27246 
An issue was discovered in MISP before 2.4.156. An SVG org logo (which may contain JavaScript) is not forbidden by default.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T17:13:58.000Z
CVE-2022-27247 
onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full address, mail information, and phone number) via GastKont Insecure Direct Object Reference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:25:12.000Z
CVE-2022-27248 
A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download arbitrary .dwg files from a remote server by specifying an absolute or relative path when invoking the affected DownloadDwg endpoint. An attack uses the path field to CaddemServiceJS/CaddemService.svc/rest/DownloadDwg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-03T22:14:44.000Z
CVE-2022-27249 
An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-03T22:16:33.000Z
CVE-2022-27250 
The UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone, e.g., to obtain sensitive information from text messages or the device's screen, record video of the device's physical environment, or modify data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T20:49:27.000Z
CVE-2022-27254 
The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T21:09:34.000Z
CVE-2022-27255 
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-01T11:43:25.000Z
CVE-2022-27256 
A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-13T13:35:40.000Z
CVE-2022-27257 
A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T17:54:57.000Z
CVE-2022-27258 
Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T16:01:36.000Z
CVE-2022-27260 
An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T16:29:00.000Z
CVE-2022-27261 
An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T16:29:01.000Z
CVE-2022-27262 
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T16:29:02.000Z
CVE-2022-27263 
An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T16:29:02.000Z
CVE-2022-27268 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component get_cgi_from_memory. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:00.000Z
CVE-2022-27269 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component config_ovpn. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:00.000Z
CVE-2022-27270 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component ipsec_secrets. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:59.000Z
CVE-2022-27271 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:59.000Z
CVE-2022-27272 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_1791C. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:58.000Z
CVE-2022-27273 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12168. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:58.000Z
CVE-2022-27274 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12028. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:55.000Z
CVE-2022-27275 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_122D0. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:55.000Z
CVE-2022-27276 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_10F2C. This vulnerability is triggered via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:54.000Z
CVE-2022-27277 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub_17C08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:54.000Z
CVE-2022-27279 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub_177E0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:52.000Z
CVE-2022-27280 
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the web_exec parameter at /apply.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:51.000Z
CVE-2022-27286 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanNonLogin. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:48.000Z
CVE-2022-27287 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPPoE. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:47.000Z
CVE-2022-27288 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPTP. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:47.000Z
CVE-2022-27289 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:46.000Z
CVE-2022-27290 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:45.000Z
CVE-2022-27291 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the config.save_network_enabled parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:44.000Z
CVE-2022-27292 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerability allows attackers to cause a Denial of Service (DoS) via the nextPage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:44.000Z
CVE-2022-27293 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:43.000Z
CVE-2022-27294 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:42.000Z
CVE-2022-27295 
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:23:41.000Z
CVE-2022-27299 
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T13:40:31.000Z
CVE-2022-27304 
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T19:03:03.000Z
CVE-2022-27305 
Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T15:37:38.000Z
CVE-2022-27308 
A stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a project title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-09T17:29:56.000Z
CVE-2022-27311 
Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T12:53:43.000Z
CVE-2022-27313 
An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T19:57:11.000Z
CVE-2022-27330 
A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Title text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T20:01:53.000Z
CVE-2022-27331 
An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T02:47:09.000Z
CVE-2022-27332 
An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication. This vulnerability can allow attackers to execute phishing attacks or cause a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T02:47:10.000Z
CVE-2022-27333 
idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T21:05:27.000Z
CVE-2022-27336 
Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T15:17:32.000Z
CVE-2022-27337 
A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T18:36:34.000Z
CVE-2022-27340 
MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-22T19:51:58.000Z
CVE-2022-27341 
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-22T19:51:59.000Z
CVE-2022-27342 
Link-Admin v0.0.1 was discovered to contain a SQL injection vulnerability via DictRest.ResponseResult().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-22T19:51:59.000Z
CVE-2022-27346 
Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:36.000Z
CVE-2022-27348 
Social Codia SMS v1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:38.000Z
CVE-2022-27349 
Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:38.000Z
CVE-2022-27351 
Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:41.000Z
CVE-2022-27352 
Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:41.000Z
CVE-2022-27357 
Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T08:23:45.000Z
CVE-2022-27359 
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T18:34:56.000Z
CVE-2022-27360 
SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T18:19:43.000Z
CVE-2022-27365 
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T17:31:06.000Z
CVE-2022-27366 
Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T17:31:06.000Z
CVE-2022-27367 
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T17:31:11.000Z
CVE-2022-27368 
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Lists.php_zhuan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T17:31:09.000Z