rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-36562 
Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-30T20:05:53.000Z
CVE-2022-36563 
Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-30T20:05:54.000Z
CVE-2022-36564 
Incorrect access control in the install directory (C:\Strawberry) of StrawberryPerl v5.32.1.1 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-30T20:05:54.000Z
CVE-2022-36565 
Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-30T20:05:56.000Z
CVE-2022-36566 
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T17:12:13.000Z
CVE-2022-36568 
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T19:03:24.000Z
CVE-2022-36569 
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T19:03:25.000Z
CVE-2022-36570 
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T19:03:26.000Z
CVE-2022-36571 
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T19:03:27.000Z
CVE-2022-36572 
Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /upload/admin.php?/deal/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:06:48.000Z
CVE-2022-36573 
A cross-site scripting (XSS) vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Markdown text box under /blog/post/edit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:06:49.000Z
CVE-2022-36577 
An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T16:49:40.000Z
CVE-2022-36578 
jizhicms v2.3.1 has SQL injection in the background.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T16:51:55.000Z
CVE-2022-36579 
Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T16:58:31.000Z
CVE-2022-36580 
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T19:44:14.000Z
CVE-2022-36581 
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T19:44:16.000Z
CVE-2022-36582 
An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T19:44:17.000Z
CVE-2022-36583 
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T17:50:47.000Z
CVE-2022-36584 
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-06T16:50:08.000Z
CVE-2022-36585 
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T22:55:35.000Z
CVE-2022-36586 
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T23:48:57.000Z
CVE-2022-36587 
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T16:31:12.000Z
CVE-2022-36588 
In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T23:45:17.000Z
CVE-2022-36593 
kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T03:19:26.000Z
CVE-2022-36594 
Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T03:27:39.000Z
CVE-2022-36599 
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T12:51:34.000Z
CVE-2022-36600 
BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/posts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T04:05:50.000Z
CVE-2022-36601 
The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T19:36:14.000Z
CVE-2022-36602 
InnoSilicon A10 a10_20200924_120556 was discovered to contain a remote code execution (RCE) vulnerability in the setPlatformAPI function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T19:36:14.000Z
CVE-2022-36603 
InnoSilicon T3T+ t2t+_soc_20190911_151433.swu was discovered to contain a remote code execution (RCE) vulnerability in the checkUrl function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T19:36:15.000Z
CVE-2022-36604 
An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T19:36:16.000Z
CVE-2022-36605 
Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T14:43:06.000Z
CVE-2022-36606 
Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T14:43:07.000Z
CVE-2022-36609 
Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patient.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T04:10:56.000Z
CVE-2022-36610 
TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:58:53.000Z
CVE-2022-36611 
TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:58:54.000Z
CVE-2022-36612 
TOTOLINK A950RG V4.1.2cu.5204_B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:58:55.000Z
CVE-2022-36613 
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:58:55.000Z
CVE-2022-36614 
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:58:56.000Z
CVE-2022-36615 
TOTOLINK A3000RU V4.1.2cu.5185_B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:58:57.000Z
CVE-2022-36616 
TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-28T23:58:57.000Z
CVE-2022-36617 
Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T15:33:18.000Z
CVE-2022-36619 
In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T22:55:13.000Z
CVE-2022-36620 
D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T00:00:00.000Z
CVE-2022-36621 
Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T20:04:08.000Z
CVE-2022-36622 
Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T20:04:47.000Z
CVE-2022-36633 
Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack. This is fully unauthenticated attack utilizing the trusted teleport server to deliver the payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-24T12:29:54.000Z
CVE-2022-36634 
An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-07T00:00:00.000Z
CVE-2022-36635 
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-07T00:00:00.000Z
CVE-2022-36636 
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T04:34:52.000Z
CVE-2022-36637 
Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the brand_name parameter at /brand.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T04:34:53.000Z
CVE-2022-36638 
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T20:32:31.000Z
CVE-2022-36639 
A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T20:32:32.000Z
CVE-2022-36640 
influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deployed on a publicly accessible endpoint, we strongly recommend authentication be enabled. Otherwise the data will be publicly available to any unauthenticated user. The default settings do NOT enable authentication and authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T20:50:45.000Z
CVE-2022-36642 
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive information which can be unlatched by exploiting the LFD vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T21:23:28.000Z
CVE-2022-36647 
PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at source/common/header.cc:269.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T21:35:32.000Z
CVE-2022-36648 
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third parties as not a valid vulnerability due to the rocker device not falling within the virtualization use case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-36657 
Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-30T20:57:42.000Z
CVE-2022-36659 
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T16:30:06.000Z
CVE-2022-36660 
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T16:30:07.000Z
CVE-2022-36661 
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T16:30:08.000Z
CVE-2022-36663 
Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-06T20:44:17.000Z
CVE-2022-36664 
Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-26T00:00:00.000Z
CVE-2022-36667 
Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. The vulnerability exist during adding parts and from the upload function, the attacker can upload PHP Reverse Shell straight away to gain RCE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-14T03:14:22.000Z
CVE-2022-36668 
Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the parts under parameters. Using the XSS payload, the Stored XSS triggered and can be used for further attack vector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-14T03:20:17.000Z
CVE-2022-36669 
Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-14T03:10:34.000Z
CVE-2022-36670 
PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-06T18:08:43.000Z
CVE-2022-36671 
Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T02:08:11.000Z
CVE-2022-36672 
Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T02:08:13.000Z
CVE-2022-36674 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/view_schedule.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T02:16:34.000Z
CVE-2022-36675 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/manage_schedule.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T02:16:35.000Z
CVE-2022-36676 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/view_category.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-01T02:16:37.000Z
CVE-2022-36677 
Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-05T00:00:00.000Z
CVE-2022-36678 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T12:50:32.000Z
CVE-2022-36679 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T12:50:33.000Z
CVE-2022-36680 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T12:50:34.000Z
CVE-2022-36681 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T12:51:36.000Z
CVE-2022-36682 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_student.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T12:50:36.000Z
CVE-2022-36683 
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_payment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T12:50:45.000Z
CVE-2022-36686 
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockin&month=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T13:56:54.000Z
CVE-2022-36687 
Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T13:56:55.000Z
CVE-2022-36688 
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T13:56:55.000Z
CVE-2022-36689 
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/waste&month=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T13:56:56.000Z