rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-44401 
D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgrade_filter.asp file
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-06T00:00:00.000Z
CVE-2024-44402 
D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via msp_info.htm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-06T00:00:00.000Z
CVE-2024-44408 
D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-06T00:00:00.000Z
CVE-2024-44410 
D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-09T00:00:00.000Z
CVE-2024-44411 
D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the msp_info_htm function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-09T00:00:00.000Z
CVE-2024-44413 
A vulnerability was discovered in DI_8200-16.07.26A1, which has been classified as critical. This issue affects the upgrade_filter_asp function in the upgrade_filter.asp file. Manipulation of the path parameter can lead to command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-44414 
A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_4901E0 function in the msp_info.htm file. Manipulation of the path parameter can lead to command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-44415 
A vulnerability was discovered in DI_8200-16.07.26A1, There is a buffer overflow in the dbsrv_asp function; The strcpy function is executed without checking the length of the string, leading to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-44430 
SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortex_lite/control/register_case.php interface
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-13T00:00:00.000Z
CVE-2024-44439 
An issue in Shanghai Zhouma Network Technology CO., Ltd IMS Intelligent Manufacturing Collaborative Internet of Things System v.1.9.1 allows a remote attacker to escalate privileges via the open port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-44449 
Cross Site Scripting vulnerability in Quorum onQ OS v.6.0.0.5.2064 allows a remote attacker to obtain sensitive information via the msg parameter in the Login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-02-03T00:00:00.000Z
CVE-2024-44450 
Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 #190.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-07T00:00:00.000Z
CVE-2024-44459 
A memory allocation issue in vernemq v2.0.1 allows attackers to cause a Denial of Service (DoS) via excessive memory consumption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-12T00:00:00.000Z
CVE-2024-44460 
An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-12T00:00:00.000Z
CVE-2024-44466 
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44540 
Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-23T00:00:00.000Z
CVE-2024-44541 
evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44542 
SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-44546 
Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-11T00:00:00.000Z
CVE-2024-44549 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44550 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44551 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44552 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44553 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44555 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44556 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44557 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44558 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44563 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44565 
Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-26T00:00:00.000Z
CVE-2024-44570 
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44571 
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44572 
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44573 
A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44574 
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44575 
RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44577 
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-11T00:00:00.000Z
CVE-2024-44587 
itsourcecode Alton Management System 1.0 is vulnerable to SQL Injection in /noncombo_save.php via the "menu" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-05T00:00:00.000Z
CVE-2024-44589 
Stack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-44598 
FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-15T00:00:00.000Z
CVE-2024-44599 
FNT Command 13.4.0 is vulnerable to Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-15T00:00:00.000Z
CVE-2024-44610 
PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-44623 
An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-16T00:00:00.000Z
CVE-2024-44625 
Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-15T00:00:00.000Z
CVE-2024-44630 
Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country, state, city, padd, cadd, and gender.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-14T00:00:00.000Z
CVE-2024-44632 
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-14T00:00:00.000Z
CVE-2024-44633 
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-14T00:00:00.000Z
CVE-2024-44635 
PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-14T00:00:00.000Z
CVE-2024-44636 
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-14T00:00:00.000Z
CVE-2024-44639 
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-14T00:00:00.000Z
CVE-2024-44640 
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-14T00:00:00.000Z
CVE-2024-44641 
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44644 
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44647 
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44648 
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44651 
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44652 
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44653 
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44654 
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44655 
PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44657 
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44658 
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44659 
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44660 
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44661 
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44662 
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44663 
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44664 
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-44667 
Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15.35_P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-10T00:00:00.000Z
CVE-2024-44674 
D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-07T00:00:00.000Z
CVE-2024-44676 
eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController. java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-10T00:00:00.000Z
CVE-2024-44677 
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-10T00:00:00.000Z
CVE-2024-44678 
Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the ssid parameter in the request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-25T00:00:00.000Z
CVE-2024-44682 
ShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to execute code by changing POST parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-30T00:00:00.000Z
CVE-2024-44683 
Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-30T00:00:00.000Z
CVE-2024-44684 
TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-30T00:00:00.000Z
CVE-2024-44685 
Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information, including passwords, is exposed in clear text within the JSON response when configuring SMTP settings via the Web UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-13T00:00:00.000Z
CVE-2024-44716 
A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-29T00:00:00.000Z
CVE-2024-44717 
A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-29T00:00:00.000Z
CVE-2024-44720 
SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-09T00:00:00.000Z
CVE-2024-44721 
SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-09T00:00:00.000Z
CVE-2024-44722 
SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-20T00:00:00.000Z
CVE-2024-44724 
AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-09T00:00:00.000Z
CVE-2024-44725 
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-09T00:00:00.000Z
CVE-2024-44727 
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-05T00:00:00.000Z
CVE-2024-44728 
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-05T00:00:00.000Z
CVE-2024-44729 
Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226 allows unauthenticated attackers without presenter privileges to arbitrarily eject users from a meeting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-44730 
Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-44731 
Mirotalk before commit 9de226 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary code via sending crafted payloads in messages to other users over RTC connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-44734 
Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z