admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-06 18:53:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2021-11-10 07:01:01 +00:00
parent ecb2350791
commit 05de73d934
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
2 changed files with 130 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

71
2021/42xxx/CVE-2021-42662.json
View File

@ -1,17 +1,76 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2021-42662",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2021-42662",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html",
"refsource": "MISC",
"name": "https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html"
},
{
"refsource": "MISC",
"name": "http://packetstormsecurity.com/files/164615/Online-Event-Booking-And-Reservation-System-1.0-Cross-Site-Scripting.html",
"url": "http://packetstormsecurity.com/files/164615/Online-Event-Booking-And-Reservation-System-1.0-Cross-Site-Scripting.html"
},
{
"refsource": "MISC",
"name": "https://github.com/TheHackingRabbi/CVE-2021-42662",
"url": "https://github.com/TheHackingRabbi/CVE-2021-42662"
},
{
"refsource": "MISC",
"name": "https://www.exploit-db.com/exploits/50450",
"url": "https://www.exploit-db.com/exploits/50450"
}
]
}

71
2021/42xxx/CVE-2021-42664.json
View File

@ -1,17 +1,76 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2021-42664",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2021-42664",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html",
"refsource": "MISC",
"name": "https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html"
},
{
"refsource": "MISC",
"name": "http://packetstormsecurity.com/files/164618/Engineers-Online-Portal-1.0-SQL-Injection.html",
"url": "http://packetstormsecurity.com/files/164618/Engineers-Online-Portal-1.0-SQL-Injection.html"
},
{
"refsource": "MISC",
"name": "https://github.com/TheHackingRabbi/CVE-2021-42664",
"url": "https://github.com/TheHackingRabbi/CVE-2021-42664"
},
{
"refsource": "MISC",
"name": "https://www.exploit-db.com/exploits/50451",
"url": "https://www.exploit-db.com/exploits/50451"
}
]
}