stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2023-2331 (severity: HIGH, weakness: CWE-428)
Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service. This issue affects Surelock Windows : from 2.3.12 through 2.40.0.
CVE-2023-23313 (severity: MEDIUM, weakness: CWE-79)
Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2.
CVE-2023-23314 (severity: HIGH, weakness: CWE-22)
An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file.
CVE-2023-23315 (severity: CRITICAL, weakness: CWE-89)
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
CVE-2023-2332 (severity: MEDIUM, weakness: CWE-79)
A stored Cross-site Scripting (XSS) vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scripts. This can lead to the execution of arbitrary JavaScript code in the context of the user's browser, potentially stealing cookies or redirecting users to malicious sites. The issue is fixed in version 10.5.21.
CVE-2023-23324 (severity: CRITICAL, weakness: CWE-798)
Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account.
CVE-2023-23325 (severity: CRITICAL, weakness: CWE-78)
Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter.
CVE-2023-23326 (severity: MEDIUM, weakness: CWE-79)
A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low privilege user can inject arbitrary Javascript into their e-mail address which is executed when an administrator logs into AvantFAX to view the admin dashboard. This may result in stealing an administrator's session cookie and hijacking their session.
CVE-2023-23327 (severity: MEDIUM, weakness: CWE-200)
An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and database backups are stored using the current date as the filename and hosted on the web server without access controls.
CVE-2023-23328 (severity: HIGH, weakness: CWE-434)
A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.
CVE-2023-2333 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Ninja Forms Google Sheet Connector WordPress plugin before 1.2.7, gsheetconnector-ninja-forms-pro WordPress plugin through 1.2.7 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVE-2023-23330 (severity: HIGH, weakness: CWE-552)
amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion.
CVE-2023-23331 (severity: CRITICAL, weakness: CWE-89)
Amano Xoffice parking solutions 7.1.3879 is vulnerable to SQL Injection.
CVE-2023-23333 (severity: CRITICAL, weakness: CWE-77)
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
CVE-2023-2334 (severity: MEDIUM, weakness: NVD-CWE-Other)
The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack
CVE-2023-23342 (severity: HIGH, weakness: NVD-CWE-Other)
If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented.
CVE-2023-23343 (severity: MEDIUM, weakness: CWE-1021)
A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain.
CVE-2023-23344 (severity: MEDIUM, weakness: CWE-276)
A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page.
CVE-2023-23346 (severity: HIGH, weakness: CWE-327)
HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.
CVE-2023-23347 (severity: HIGH, weakness: CWE-327)
HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.
CVE-2023-23348 (severity: MEDIUM, weakness: CWE-922)
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.
CVE-2023-23349 (severity: LOW, weakness: CWE-316)
Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form of a website with the saved credentials, and the KPM extension must autofill these credentials. The attacker must then launch a malware module to steal those specific credentials.
CVE-2023-2335 (severity: HIGH, weakness: CWE-312)
Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve Admin user credentials This issue affects surelock windows: from 2.3.12 through 2.40.0.
CVE-2023-23354 (severity: HIGH, weakness: CWE-79)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.5.0.738 ( 2023/03/06 ) and later QuLog Center 1.4.1.691 ( 2023/03/01 ) and later QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
CVE-2023-23355 (severity: HIGH, weakness: CWE-77)
An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors. QES is not affected. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2348 build 20230324 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later
CVE-2023-23356 (severity: MEDIUM, weakness: CWE-77)
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later
CVE-2023-23357 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.5.0.738 ( 2023/03/06 ) and later QuLog Center 1.4.1.691 ( 2023/03/01 ) and later QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
CVE-2023-2336 (severity: MEDIUM, weakness: CWE-22)
Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-23362 (severity: HIGH, weakness: CWE-78)
An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later
CVE-2023-23363 (severity: CRITICAL, weakness: CWE-120)
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2441 build 20230621 and later QTS 4.3.3.2420 build 20230621 and later QTS 4.2.6 build 20230621 and later QTS 4.3.4.2451 build 20230621 and later
CVE-2023-23364 (severity: CRITICAL, weakness: CWE-120)
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.1 ( 2023/03/29 ) and later Multimedia Console 1.4.7 ( 2023/03/20 ) and later
CVE-2023-23365 (severity: MEDIUM, weakness: CWE-22)
A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Music Station 5.3.22 and later
CVE-2023-23366 (severity: MEDIUM, weakness: CWE-22)
A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Music Station 5.3.22 and later
CVE-2023-23367 (severity: HIGH, weakness: CWE-78)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTScloud c5.1.0.2498 and later
CVE-2023-23368 (severity: CRITICAL, weakness: CWE-78)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later
CVE-2023-23369 (severity: CRITICAL, weakness: CWE-77)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.2 ( 2023/05/04 ) and later Multimedia Console 1.4.8 ( 2023/05/05 ) and later QTS 5.1.0.2399 build 20230515 and later QTS 4.3.6.2441 build 20230621 and later QTS 4.3.4.2451 build 20230621 and later QTS 4.3.3.2420 build 20230621 and later QTS 4.2.6 build 20230621 and later Media Streaming add-on 500.1.1.2 ( 2023/06/12 ) and later Media Streaming add-on 500.0.0.11 ( 2023/06/16 ) and later
CVE-2023-2337 (severity: MEDIUM, weakness: NVD-CWE-Other)
The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVE-2023-23370 (severity: MEDIUM, weakness: CWE-522)
An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to user accounts and access sensitive data used by the user account via unspecified vectors. We have already fixed the vulnerability in the following version: QVPN Windows 2.1.0.0518 and later
CVE-2023-23371 (severity: MEDIUM, weakness: CWE-311)
A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following version: QVPN Windows 2.2.0.0823 and later
CVE-2023-23372 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QTS 4.5.4.2467 build 20230718 and later QuTS hero h5.1.0.2424 build 20230609 and later QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h4.5.4.2476 build 20230728 and later
CVE-2023-23373 (severity: HIGH, weakness: CWE-78)
An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: QUSBCam2 2.0.3 ( 2023/06/15 ) and later
CVE-2023-23374 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-23375 (severity: HIGH, weakness: CWE-20)
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-23376 (severity: HIGH, weakness: CWE-122)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-23377 (severity: HIGH, weakness: CWE-122)
3D Builder Remote Code Execution Vulnerability
CVE-2023-23378 (severity: HIGH, weakness: CWE-122)
Print 3D Remote Code Execution Vulnerability
CVE-2023-23379 (severity: HIGH, weakness: CWE-23)
Microsoft Defender for IoT Elevation of Privilege Vulnerability
CVE-2023-2338 (severity: HIGH, weakness: CWE-89)
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-23381 (severity: HIGH, weakness: CWE-122)
Visual Studio Remote Code Execution Vulnerability
CVE-2023-23382 (severity: MEDIUM, weakness: CWE-257)
Azure Machine Learning Compute Instance Information Disclosure Vulnerability
CVE-2023-23383 (severity: MEDIUM, weakness: CWE-79)
Service Fabric Explorer Spoofing Vulnerability
CVE-2023-23384 (severity: HIGH, weakness: CWE-122)
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2023-23385 (severity: HIGH, weakness: CWE-190)
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
CVE-2023-23388 (severity: HIGH, weakness: CWE-681)
Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2023-23389 (severity: MEDIUM, weakness: CWE-367)
Microsoft Defender Elevation of Privilege Vulnerability
CVE-2023-2339 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-23390 (severity: HIGH, weakness: CWE-122)
3D Builder Remote Code Execution Vulnerability
CVE-2023-23391 (severity: MEDIUM, weakness: CWE-23)
Office for Android Spoofing Vulnerability
CVE-2023-23392 (severity: CRITICAL, weakness: CWE-416)
HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2023-23393 (severity: HIGH, weakness: CWE-591)
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
CVE-2023-23394 (severity: MEDIUM, weakness: CWE-822)
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
CVE-2023-23395 (severity: LOW, weakness: CWE-601)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-23396 (severity: MEDIUM, weakness: CWE-400)
Microsoft Excel Denial of Service Vulnerability
CVE-2023-23397 (severity: CRITICAL, weakness: CWE-20)
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2023-23398 (severity: HIGH, weakness: CWE-290)
Microsoft Excel Spoofing Vulnerability
CVE-2023-23399 (severity: HIGH, weakness: CWE-125)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-2340 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-23400 (severity: HIGH, weakness: CWE-122)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-23401 (severity: HIGH, weakness: CWE-681)
Windows Media Remote Code Execution Vulnerability
CVE-2023-23402 (severity: HIGH, weakness: CWE-415)
Windows Media Remote Code Execution Vulnerability
CVE-2023-23403 (severity: HIGH, weakness: CWE-122)
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-23404 (severity: HIGH, weakness: CWE-416)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-23405 (severity: HIGH, weakness: CWE-190)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2023-23406 (severity: HIGH, weakness: CWE-122)
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-23407 (severity: HIGH, weakness: CWE-591)
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVE-2023-23408 (severity: MEDIUM, weakness: CWE-79)
Azure Apache Ambari Spoofing Vulnerability
CVE-2023-23409 (severity: MEDIUM, weakness: CWE-20)
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
CVE-2023-2341 (severity: HIGH, weakness: CWE-79)
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-23410 (severity: HIGH, weakness: CWE-190)
Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2023-23411 (severity: MEDIUM, weakness: CWE-400)
Windows Hyper-V Denial of Service Vulnerability
CVE-2023-23412 (severity: HIGH, weakness: CWE-269)
Windows Accounts Picture Elevation of Privilege Vulnerability
CVE-2023-23413 (severity: HIGH, weakness: CWE-908)
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-23414 (severity: HIGH, weakness: CWE-591)
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVE-2023-23415 (severity: CRITICAL, weakness: CWE-122)
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
CVE-2023-23416 (severity: HIGH, weakness: CWE-20)
Windows Cryptographic Services Remote Code Execution Vulnerability
CVE-2023-23417 (severity: HIGH, weakness: CWE-190)
Windows Partition Management Driver Elevation of Privilege Vulnerability
CVE-2023-23418 (severity: HIGH, weakness: CWE-125)
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2023-23419 (severity: HIGH, weakness: CWE-20)
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2023-2342 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-23420 (severity: HIGH, weakness: CWE-416)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-23421 (severity: HIGH, weakness: CWE-416)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-23422 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-23423 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-23424 (severity: CRITICAL, weakness: NVD-CWE-Other)
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution
CVE-2023-23426 (severity: MEDIUM, weakness: NVD-CWE-Other)
Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure.
CVE-2023-23427 (severity: HIGH, weakness: CWE-269)
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVE-2023-23428 (severity: HIGH, weakness: CWE-269)
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVE-2023-23429 (severity: HIGH, weakness: CWE-269)
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVE-2023-2343 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-23430 (severity: HIGH, weakness: CWE-269)
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVE-2023-23431 (severity: HIGH, weakness: CWE-347)
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.
CVE-2023-23432 (severity: HIGH, weakness: CWE-347)
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.
CVE-2023-23433 (severity: HIGH, weakness: CWE-347)
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.
CVE-2023-23434 (severity: MEDIUM, weakness: NVD-CWE-Other)
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
CVE-2023-23435 (severity: HIGH, weakness: CWE-347)
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file
CVE-2023-23436 (severity: HIGH, weakness: CWE-347)
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file
CVE-2023-23437 (severity: MEDIUM, weakness: CWE-922)
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak
CVE-2023-23438 (severity: MEDIUM, weakness: CWE-269)
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions
CVE-2023-23439 (severity: MEDIUM, weakness: NVD-CWE-Other)
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
CVE-2023-2344 (severity: CRITICAL, weakness: CWE-89)
A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=save_service of the component HTTP POST Request Handler. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227587.