stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2023-35981 (severity: CRITICAL, weakness: CWE-120)
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-35982 (severity: CRITICAL, weakness: CWE-120)
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-35983 (severity: MEDIUM, weakness: CWE-863)
This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system.
CVE-2023-35984 (severity: MEDIUM, weakness: CWE-787)
The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An attacker in physical proximity can cause a limited out of bounds write.
CVE-2023-35985 (severity: HIGH, weakness: CWE-73)
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted malicious site if the browser plugin extension is enabled.
CVE-2023-35986 (severity: HIGH, weakness: CWE-121)
Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
CVE-2023-35987 (severity: CRITICAL, weakness: CWE-798)
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
CVE-2023-35989 (severity: HIGH, weakness: CWE-190)
An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-3599 (severity: CRITICAL, weakness: CWE-264)
A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function save_user of the file admin_class.php of the component Add User Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-233450 is the identifier assigned to this vulnerability.
CVE-2023-35990 (severity: LOW, weakness: CWE-863)
The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed.
CVE-2023-35991 (severity: HIGH, weakness: NVD-CWE-Other)
Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions.
CVE-2023-35992 (severity: HIGH, weakness: CWE-190)
An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-35993 (severity: HIGH, weakness: CWE-416)
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-35994 (severity: HIGH, weakness: CWE-129)
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta initialization part.
CVE-2023-35995 (severity: HIGH, weakness: CWE-129)
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 1.
CVE-2023-35996 (severity: HIGH, weakness: CWE-129)
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 0.
CVE-2023-35997 (severity: HIGH, weakness: CWE-129)
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 2 or more.
CVE-2023-35998 (severity: MEDIUM, weakness: CWE-862)
A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
CVE-2023-3600 (severity: HIGH, weakness: CWE-416)
During the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.
CVE-2023-36000 (severity: MEDIUM, weakness: CWE-862)
A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
CVE-2023-36002 (severity: MEDIUM, weakness: CWE-862)
A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.
CVE-2023-36003 (severity: HIGH, weakness: CWE-426)
XAML Diagnostics Elevation of Privilege Vulnerability
CVE-2023-36004 (severity: HIGH, weakness: CWE-287)
Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
CVE-2023-36005 (severity: HIGH, weakness: CWE-591)
Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2023-36006 (severity: HIGH, weakness: CWE-121)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-36007 (severity: MEDIUM, weakness: CWE-79)
Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability
CVE-2023-36008 (severity: MEDIUM, weakness: CWE-416)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-36009 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Word Information Disclosure Vulnerability
CVE-2023-3601 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.
CVE-2023-36010 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Defender Denial of Service Vulnerability
CVE-2023-36011 (severity: HIGH, weakness: CWE-822)
Win32k Elevation of Privilege Vulnerability
CVE-2023-36012 (severity: MEDIUM, weakness: CWE-908)
DHCP Server Service Information Disclosure Vulnerability
CVE-2023-36013 (severity: MEDIUM, weakness: CWE-798)
PowerShell Information Disclosure Vulnerability
CVE-2023-36014 (severity: HIGH, weakness: CWE-94)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-36016 (severity: LOW, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-36017 (severity: HIGH, weakness: CWE-843)
Windows Scripting Engine Memory Corruption Vulnerability
CVE-2023-36018 (severity: CRITICAL, weakness: CWE-359)
Visual Studio Code Jupyter Extension Spoofing Vulnerability
CVE-2023-36019 (severity: HIGH, weakness: CWE-73)
Microsoft Power Platform Connector Spoofing Vulnerability
CVE-2023-36020 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-36021 (severity: HIGH, weakness: CWE-20)
Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability
CVE-2023-36022 (severity: MEDIUM, weakness: CWE-94)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-36024 (severity: HIGH, weakness: CWE-269)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-36025 (severity: HIGH, weakness: NVD-CWE-Other)
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36026 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-36027 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-36028 (severity: CRITICAL, weakness: CWE-122)
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-36029 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-3603 (severity: MEDIUM, weakness: CWE-476)
A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being checked for failure. This will likely crash the authenticated user's sftp server connection (if implemented as forking as recommended). For thread-based servers, this might also cause DoS for legitimate users. Given this code is not in any released versions, no security releases have been issued.
CVE-2023-36030 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 Sales Spoofing Vulnerability
CVE-2023-36031 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-36033 (severity: HIGH, weakness: CWE-822)
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36034 (severity: HIGH, weakness: CWE-416)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-36035 (severity: HIGH, weakness: CWE-502)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-36036 (severity: HIGH, weakness: CWE-122)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36037 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2023-36038 (severity: HIGH, weakness: CWE-400)
ASP.NET Core Denial of Service Vulnerability
CVE-2023-36039 (severity: HIGH, weakness: CWE-502)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-3604 (severity: HIGH, weakness: NVD-CWE-Other)
The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered.
CVE-2023-36041 (severity: HIGH, weakness: CWE-416)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-36042 (severity: MEDIUM, weakness: CWE-122)
Visual Studio Denial of Service Vulnerability
CVE-2023-36043 (severity: MEDIUM, weakness: CWE-200)
Open Management Infrastructure Information Disclosure Vulnerability
CVE-2023-36045 (severity: HIGH, weakness: CWE-822)
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-36046 (severity: HIGH, weakness: CWE-59)
Windows Authentication Denial of Service Vulnerability
CVE-2023-36047 (severity: HIGH, weakness: CWE-59)
Windows Authentication Elevation of Privilege Vulnerability
CVE-2023-36049 (severity: CRITICAL, weakness: CWE-20)
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-3605 (severity: CRITICAL, weakness: CWE-307)
A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.
CVE-2023-36050 (severity: HIGH, weakness: CWE-502)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-36052 (severity: HIGH, weakness: CWE-359)
Azure CLI REST Command Information Disclosure Vulnerability
CVE-2023-36053 (severity: HIGH, weakness: CWE-1333)
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.
CVE-2023-36054 (severity: MEDIUM, weakness: CWE-824)
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
CVE-2023-3606 (severity: HIGH, weakness: CWE-78)
A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This affects an unknown part of the file /api/ping. The manipulation of the argument host leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233475. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-3607 (severity: HIGH, weakness: CWE-78)
A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-233476. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-36076 (severity: CRITICAL, weakness: CWE-89)
SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php.
CVE-2023-3608 (severity: HIGH, weakness: CWE-78)
A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233477 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-36081 (severity: MEDIUM, weakness: CWE-79)
Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard.
CVE-2023-36082 (severity: CRITICAL, weakness: CWE-522)
An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials.
CVE-2023-36085 (severity: MEDIUM, weakness: CWE-601)
The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources.
CVE-2023-36088 (severity: HIGH, weakness: CWE-918)
Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information.
CVE-2023-36089 (severity: CRITICAL, weakness: CWE-863)
Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2023-3609 (severity: HIGH, weakness: CWE-416)
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
CVE-2023-36090 (severity: CRITICAL, weakness: CWE-863)
Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2023-36091 (severity: CRITICAL, weakness: CWE-863)
Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2023-36092 (severity: HIGH, weakness: CWE-863)
Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2023-36093 (severity: MEDIUM, weakness: CWE-79)
There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3
CVE-2023-36095 (severity: CRITICAL, weakness: CWE-94)
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.
CVE-2023-36097 (severity: CRITICAL, weakness: CWE-434)
funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.
CVE-2023-3610 (severity: HIGH, weakness: CWE-416)
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.
CVE-2023-36100 (severity: CRITICAL, weakness: CWE-269)
An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser.
CVE-2023-36103 (severity: HIGH, weakness: CWE-77)
Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request.
CVE-2023-36106 (severity: HIGH, weakness: CWE-284)
An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list.
CVE-2023-36109 (severity: CRITICAL, weakness: CWE-120)
Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c.
CVE-2023-3611 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
CVE-2023-36118 (severity: MEDIUM, weakness: CWE-79)
Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter.
CVE-2023-3612 (severity: HIGH, weakness: CWE-749)
Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content.
CVE-2023-36121 (severity: MEDIUM, weakness: CWE-79)
Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the description function in the SEO project.
CVE-2023-36123 (severity: HIGH, weakness: CWE-22)
Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information.
CVE-2023-36126 (severity: MEDIUM, weakness: CWE-79)
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0
CVE-2023-36127 (severity: HIGH, weakness: CWE-203)
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVE-2023-3613 (severity: LOW, weakness: CWE-863)
Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.
CVE-2023-36131 (severity: CRITICAL, weakness: NVD-CWE-Other)
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter.
CVE-2023-36132 (severity: CRITICAL, weakness: NVD-CWE-Other)
PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.
CVE-2023-36133 (severity: CRITICAL, weakness: NVD-CWE-Other)
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
CVE-2023-36134 (severity: CRITICAL, weakness: CWE-345)
In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.