rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-29596 
MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T19:03:24.000Z
CVE-2022-29597 
Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local File Inclusion (LFI). Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the file contents of the internal system file requested. This ability could allow for adversaries to extract sensitive data and/or files from the underlying file system, gain knowledge about the internal workings of the system, or access source code of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-02T17:12:51.000Z
CVE-2022-29598 
Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an reflected Cross-Site Scripting (XSS) vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T17:07:00.000Z
CVE-2022-29599 Commandline class shell injection vulnerabilities
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
Problem types: cwe_id: CWE-116
description: CWE-116 Improper Encoding or Escaping of Output
Affected products: vendor: Apache Software Foundation
product: Apache Maven
Published: 2022-05-23T10:25:10.000Z
CVE-2022-29600 
The oelib (aka One is Enough Library) extension through 4.1.5 for TYPO3 allows SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-12T21:41:39.000Z
CVE-2022-29601 
The seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-12T21:31:29.000Z
CVE-2022-29602 
The gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10.2.0 extension for TYPO3 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-12T22:48:28.000Z
CVE-2022-29603 
A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API endpoints. A remote authenticated attacker could send crafted SQL statements to a vulnerable endpoint (such as /api/students/me/messages/) to, for example, retrieve personal information or change grades.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T03:50:46.000Z
CVE-2022-29604 
An issue was discovered in ONOS 2.5.1. An intent with an uppercase letter in a device ID shows the CORRUPT state, which is misleading to a network operator. Improper handling of case sensitivity causes inconsistency between intent and flow rules in the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-20T00:00:00.000Z
CVE-2022-29605 
An issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of an intent into an OpenFlow 1.0 switch that does not support IPv6. Improper handling of the difference in capabilities of the intent and switch is misleading to a network operator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-20T00:00:00.000Z
CVE-2022-29606 
An issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT state, which is misleading to a network operator. Improper handling of such port numbers causes inconsistency between intent and flow rules in the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-20T00:00:00.000Z
CVE-2022-29607 
An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. Improper handling of such an intent is misleading to a network operator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-20T00:00:00.000Z
CVE-2022-29608 
An issue was discovered in ONOS 2.5.1. An intent with a port that is an intermediate point of its path installs an invalid flow rule, causing a network loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-20T00:00:00.000Z
CVE-2022-29609 
An issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the INSTALLING state, indicating that its flow rules are installing. Improper handling of such an intent is misleading to a network operator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-20T00:00:00.000Z
CVE-2022-29610 
SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data, which could result in Stored Cross-Site Scripting (XSS) attack.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: SAP SE
product: SAP NetWeaver Application Server ABAP
Published: 2022-05-11T14:56:23.000Z
CVE-2022-29611 
SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: SAP SE
product: SAP NetWeaver Application Server for ABAP and ABAP Platform
Published: 2022-05-11T14:57:20.000Z
CVE-2022-29612 
SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontrol webfunctionality(startservice) in Kernel which enables malicious users to retrieve information. On successful exploitation, an attacker can obtain technical information like system number or physical address, which is otherwise restricted, causing a limited impact on the confidentiality of the application.
Problem types: cwe_id: CWE-918
description: CWE-918
Affected products: vendor: SAP SE
product: SAP NetWeaver, ABAP Platform and SAP Host Agent
Published: 2022-06-14T16:59:05.000Z
CVE-2022-29613 
Due to insufficient input validation, SAP Employee Self Service allows an authenticated attacker with user privileges to alter employee number. On successful exploitation, the attacker can view personal details of other users causing a limited impact on confidentiality of the application.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: SAP SE
product: SAP Employee Self Service (Fiori My Leave Request)
Published: 2022-05-11T14:57:56.000Z
CVE-2022-29614 
SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on Unix systems, s-bit helper program sapuxuserchk, can be abused physically resulting in a privilege escalation of an attacker leading to low impact on confidentiality and integrity, but a profound impact on availability.
Problem types: cwe_id: CWE-269
description: CWE-269
Affected products: vendor: SAP SE
product: SAP NetWeaver AS ABAP, AS Java, ABAP Platform and HANA Database
Published: 2022-06-14T18:27:16.000Z
CVE-2022-29615 
SAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the logging framework log4j in version 1.x. The application's confidentiality and integrity could have a low impact due to the vulnerabilities associated with version 1.x.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: SAP SE
product: SAP NetWeaver Developer Studio (NWDS)
Published: 2022-06-14T18:34:07.000Z
CVE-2022-29616 
SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: SAP SE
product: SAP NetWeaver and ABAP Platform
vendor: SAP SE
product: SAP Host Agent
Published: 2022-05-11T15:08:03.000Z
CVE-2022-29617 
Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application.
Problem types: cwe_id: CWE-755
description: CWE-755
Affected products: vendor: SAP SE
product: CLA Assistant
Published: 2022-06-06T19:38:53.000Z
CVE-2022-29618 
Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to inject script into the URL and execute code in the user’s browser. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: SAP SE
product: SAP NetWeaver Development Infrastructure (Design Time Repository)
Published: 2022-06-14T18:35:37.000Z
CVE-2022-29619 
Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: SAP SE
product: SAP BusinessObjects Business Intelligence Platform
Published: 2022-07-12T20:26:44.000Z
CVE-2022-29620 
FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-07T20:07:58.000Z
CVE-2022-29622 
An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrary files is the desired behavior. Also, there are configuration options in all versions that can change the default behavior of how files are handled. Strapi does not consider this to be a valid vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T00:00:00.000Z
CVE-2022-29623 
An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-16T13:28:41.000Z
CVE-2022-29624 
An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T21:00:07.000Z
CVE-2022-29627 
An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T20:18:44.000Z
CVE-2022-29628 
A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T20:18:43.000Z
CVE-2022-29631 
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T20:03:03.000Z
CVE-2022-29632 
An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T19:55:46.000Z
CVE-2022-29633 
An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T19:55:47.000Z
CVE-2022-29637 
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T19:55:48.000Z
CVE-2022-29638 
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:44.000Z
CVE-2022-29639 
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function uci_cloudupdate_config.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:44.000Z
CVE-2022-29640 
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:45.000Z
CVE-2022-29641 
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:47.000Z
CVE-2022-29642 
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:48.000Z
CVE-2022-29643 
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:49.000Z
CVE-2022-29644 
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:50.000Z
CVE-2022-29645 
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:51.000Z
CVE-2022-29646 
An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted web request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T11:50:52.000Z
CVE-2022-29647 
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T21:22:01.000Z
CVE-2022-29648 
A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T21:30:07.000Z
CVE-2022-29649 
Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-15T14:26:50.000Z
CVE-2022-29650 
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T12:50:50.000Z
CVE-2022-29651 
An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T12:50:50.000Z
CVE-2022-29652 
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-19T20:40:22.000Z
CVE-2022-29653 
OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T21:41:06.000Z
CVE-2022-29654 
Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-29655 
An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T12:58:31.000Z
CVE-2022-29656 
Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/package_detail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T12:58:33.000Z
CVE-2022-29659 
Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-01T17:01:31.000Z
CVE-2022-29660 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:25.000Z
CVE-2022-29661 
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:26.000Z
CVE-2022-29662 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:27.000Z
CVE-2022-29663 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:28.000Z
CVE-2022-29664 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:29.000Z
CVE-2022-29665 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:30.000Z
CVE-2022-29666 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:31.000Z
CVE-2022-29667 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:32.000Z
CVE-2022-29669 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:35.000Z
CVE-2022-29670 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:36.000Z
CVE-2022-29676 
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:38.000Z
CVE-2022-29680 
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:41.000Z
CVE-2022-29681 
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:41.000Z
CVE-2022-29682 
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:43.000Z
CVE-2022-29683 
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:43.000Z
CVE-2022-29684 
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:44.000Z
CVE-2022-29685 
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T13:27:45.000Z