rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-30319 
Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls (SBC) PCD S-Bus authentication bypass issue. The affected components are characterized as: S-Bus (5050/UDP) authentication. The potential impact is: Authentication bypass. The Saia Burgess Controls (SBC) PCD controllers utilize the S-Bus protocol (5050/UDP) for a variety of engineering purposes. It is possible to configure a password in order to restrict access to sensitive engineering functionality. Authentication functions on the basis of a MAC/IP whitelist with inactivity timeout to which an authenticated client's MAC/IP is stored. UDP traffic can be spoofed to bypass the whitelist-based access control. Since UDP is stateless, an attacker capable of passively observing traffic can spoof arbitrary messages using the MAC/IP of an authenticated client. This allows the attacker access to sensitive engineering functionality such as uploading/downloading control logic and manipulating controller configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-28T15:50:53.000Z
CVE-2022-30320 
Saia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic Algorithm. According to FSCT-2022-0063, there is a Saia Burgess Controls (SBC) PCD S-Bus weak credential hashing scheme issue. The affected components are characterized as: S-Bus (5050/UDP) authentication. The potential impact is: Authentication bypass. The Saia Burgess Controls (SBC) PCD controllers utilize the S-Bus protocol (5050/UDP) for a variety of engineering purposes. It is possible to configure a password in order to restrict access to sensitive engineering functionality. Authentication is done by using the S-Bus 'write byte' message to a specific address and supplying a hashed version of the password. The hashing algorithm used is based on CRC-16 and as such not cryptographically secure. An insecure hashing algorithm is used. An attacker capable of passively observing traffic can intercept the hashed credentials and trivially find collisions allowing for authentication without having to bruteforce a keyspace defined by the actual strength of the password. This allows the attacker access to sensitive engineering functionality such as uploading/downloading control logic and manipulating controller configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-28T15:50:47.000Z
CVE-2022-30321 
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T11:19:42.000Z
CVE-2022-30322 
go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses. Fixed in 1.6.1 and 2.1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T11:19:35.000Z
CVE-2022-30323 
go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files. Fixed in 1.6.1 and 2.1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T11:19:30.000Z
CVE-2022-30324 
HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact stanza in submitted jobs onto the client agent host. Fixed in 1.1.14, 1.2.8, and 1.3.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T14:48:11.000Z
CVE-2022-30325 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for both 2.4 GHz and 5 GHz networks can be guessed or brute-forced by an attacker within range of the Wi-Fi network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T22:03:30.000Z
CVE-2022-30326 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interface is vulnerable to XSS. An attacker can use a simple XSS payload to crash the basic.config page of the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T22:04:08.000Z
CVE-2022-30327 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacker can change the pre-shared key of the Wi-Fi router if the interface's IP address is known.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T22:04:08.000Z
CVE-2022-30328 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T22:04:08.000Z
CVE-2022-30329 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection vulnerability exists within the web interface, allowing an attacker with valid credentials to execute arbitrary shell commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T22:04:08.000Z
CVE-2022-30330 
In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader code to compromise the hardware wallet across reboots or storage wipes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-07T03:25:34.000Z
CVE-2022-30331 
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++ code. NOTE: the vendor's position is "GSQL was behaving as expected."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-05T00:00:00.000Z
CVE-2022-30332 
In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2023-01-10T00:00:00.000Z
CVE-2022-30333 
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-09T00:00:00.000Z
CVE-2022-30334 
Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that use Tor as a proxy. Brave does NOT implement most of the privacy protections from Tor Browser."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-07T04:29:24.000Z
CVE-2022-30335 
Bonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-09T18:38:11.000Z
CVE-2022-30337 WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in JoomUnited WP Meta SEO plugin <= 4.4.8 at WordPress allows an attacker to update the social settings.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: JoomUnited
product: WP Meta SEO (WordPress plugin)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: Vulnerability discovered by Rafie Muhammad aka Yeraisci (Patchstack Alliance)
Published: 2022-07-21T16:02:24.431Z
CVE-2022-30338 
Incorrect default permissions in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-276
description: Incorrect default permissions
Affected products: vendor: n/a
product: Intel(R) VROC software
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2023-05-10T13:16:51.097Z
CVE-2022-30339 
Out-of-bounds read in firmware for the Intel(R) Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user to potentially enable denial of service via local access.
Problem types: description: denial of service
Affected products: vendor: n/a
product: Intel(R) Integrated Sensor Solution
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
Published: 2023-02-16T20:00:02.775Z
CVE-2022-30349 
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T17:20:26.000Z
CVE-2022-30350 
Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Online tool provides users with a "white out" functionality for redacting images, text, and other graphics from a PDF document. However, this mechanism does not remove underlying text or PDF object specification information from the PDF. As a result, for example, redacted text may be copy-pasted by a PDF reader.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-30T00:00:00.000Z
CVE-2022-30351 
PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supplied PDF file, does not properly sanitize this information in all cases, causing redacted information, including images and text embedded in the PDF file, to be leaked unintentionally. In cases where PDF text objects are present it is possible to copy-paste redacted information into the system clipboard. Once a document is "locked" and marked for redaction once, all redactions performed after this feature is triggered are vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-30T00:00:00.000Z
CVE-2022-30352 
phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T13:43:58.000Z
CVE-2022-30354 
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-25T00:00:00.000Z
CVE-2022-30355 
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-25T00:00:00.000Z
CVE-2022-30356 
OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters . Authentication is required with OE_ADMIN role privilege.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-25T00:00:00.000Z
CVE-2022-30357 
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-25T00:00:00.000Z
CVE-2022-30358 
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters. Authentication is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-25T00:00:00.000Z
CVE-2022-30359 
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList. Authentication is required. The information disclosed is associated with the all registered users, including user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-25T00:00:00.000Z
CVE-2022-30360 
OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/updateProfile via the slackid or phone parameters. Authentication is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-25T00:00:00.000Z
CVE-2022-30361 
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-25T00:00:00.000Z
CVE-2022-30367 
Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=delete_img.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T13:16:35.000Z
CVE-2022-30370 
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T12:46:57.000Z
CVE-2022-30371 
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/view_cargo_type.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T12:45:43.000Z
CVE-2022-30372 
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T12:44:12.000Z
CVE-2022-30373 
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/manage_cargo_type.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T12:42:51.000Z
CVE-2022-30374 
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/manage_transaction&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T12:41:38.000Z
CVE-2022-30375 
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=delete_img.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T13:28:57.000Z
CVE-2022-30376 
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/view_member.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T13:27:38.000Z
CVE-2022-30378 
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/view_post&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T13:24:08.000Z
CVE-2022-30379 
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manage_user&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T13:22:49.000Z
CVE-2022-30381 
Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:45:01.000Z
CVE-2022-30384 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:40:29.000Z
CVE-2022-30385 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:39:18.000Z
CVE-2022-30386 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:29:32.000Z
CVE-2022-30387 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:25:50.000Z
CVE-2022-30391 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:21:28.000Z
CVE-2022-30392 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:20:28.000Z
CVE-2022-30393 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:19:19.000Z
CVE-2022-30395 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:16:34.000Z
CVE-2022-30396 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:15:30.000Z
CVE-2022-30398 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:12:28.000Z
CVE-2022-30399 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:11:18.000Z
CVE-2022-30400 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:09:53.000Z
CVE-2022-30401 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:08:51.000Z
CVE-2022-30402 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:07:36.000Z
CVE-2022-30403 
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=products&c=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:06:29.000Z
CVE-2022-30404 
College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:49:19.000Z
CVE-2022-30407 
Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manage_user.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:55:19.000Z
CVE-2022-30408 
Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=delete_img.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:57:08.000Z
CVE-2022-30411 
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=individuals/view_individual&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T15:06:02.000Z
CVE-2022-30412 
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/individuals/update_status.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T15:04:46.000Z
CVE-2022-30413 
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=delete_application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T15:02:59.000Z
CVE-2022-30414 
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/view_application&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T15:01:41.000Z
CVE-2022-30415 
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/update_status.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T15:00:38.000Z
CVE-2022-30417 
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manage_user&id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-13T14:58:15.000Z