diff --git a/2023/48xxx/CVE-2023-48724.json b/2023/48xxx/CVE-2023-48724.json index bd647635624..317be2901d4 100644 --- a/2023/48xxx/CVE-2023-48724.json +++ b/2023/48xxx/CVE-2023-48724.json @@ -58,11 +58,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1864", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1864" } ] }, diff --git a/2023/49xxx/CVE-2023-49074.json b/2023/49xxx/CVE-2023-49074.json index ecd5009eeba..619f34acf2c 100644 --- a/2023/49xxx/CVE-2023-49074.json +++ b/2023/49xxx/CVE-2023-49074.json @@ -58,11 +58,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1861", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1861" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1861", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1861" } ] }, diff --git a/2023/49xxx/CVE-2023-49133.json b/2023/49xxx/CVE-2023-49133.json index 63a74672bce..e13862474a0 100644 --- a/2023/49xxx/CVE-2023-49133.json +++ b/2023/49xxx/CVE-2023-49133.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1862", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1862" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1862", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1862" } ] }, diff --git a/2023/49xxx/CVE-2023-49134.json b/2023/49xxx/CVE-2023-49134.json index 7703a73d246..75406d3b9b4 100644 --- a/2023/49xxx/CVE-2023-49134.json +++ b/2023/49xxx/CVE-2023-49134.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1862", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1862" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1862", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1862" } ] }, diff --git a/2023/49xxx/CVE-2023-49906.json b/2023/49xxx/CVE-2023-49906.json index 60502acd52c..cd72e16ea57 100644 --- a/2023/49xxx/CVE-2023-49906.json +++ b/2023/49xxx/CVE-2023-49906.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888" } ] }, diff --git a/2023/49xxx/CVE-2023-49907.json b/2023/49xxx/CVE-2023-49907.json index 62a031f3a98..7b22b135223 100644 --- a/2023/49xxx/CVE-2023-49907.json +++ b/2023/49xxx/CVE-2023-49907.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888" } ] }, diff --git a/2023/49xxx/CVE-2023-49908.json b/2023/49xxx/CVE-2023-49908.json index 834a625ba03..d1dee04e732 100644 --- a/2023/49xxx/CVE-2023-49908.json +++ b/2023/49xxx/CVE-2023-49908.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888" } ] }, diff --git a/2023/49xxx/CVE-2023-49909.json b/2023/49xxx/CVE-2023-49909.json index 05cc2042ad6..d56147a7b1e 100644 --- a/2023/49xxx/CVE-2023-49909.json +++ b/2023/49xxx/CVE-2023-49909.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888" } ] }, diff --git a/2023/49xxx/CVE-2023-49910.json b/2023/49xxx/CVE-2023-49910.json index 6478e9f6f72..9c0ec4d8c73 100644 --- a/2023/49xxx/CVE-2023-49910.json +++ b/2023/49xxx/CVE-2023-49910.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888" } ] }, diff --git a/2023/49xxx/CVE-2023-49911.json b/2023/49xxx/CVE-2023-49911.json index 73a24bf22cb..b2eb61ef4d6 100644 --- a/2023/49xxx/CVE-2023-49911.json +++ b/2023/49xxx/CVE-2023-49911.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888" } ] }, diff --git a/2023/49xxx/CVE-2023-49912.json b/2023/49xxx/CVE-2023-49912.json index dbdce679e04..3bf6a5bdd94 100644 --- a/2023/49xxx/CVE-2023-49912.json +++ b/2023/49xxx/CVE-2023-49912.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888" } ] }, diff --git a/2023/49xxx/CVE-2023-49913.json b/2023/49xxx/CVE-2023-49913.json index b08338e7b91..25d5d4422b1 100644 --- a/2023/49xxx/CVE-2023-49913.json +++ b/2023/49xxx/CVE-2023-49913.json @@ -69,11 +69,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888" } ] }, diff --git a/2024/31xxx/CVE-2024-31455.json b/2024/31xxx/CVE-2024-31455.json index 516e3417e00..caf313ff9f3 100644 --- a/2024/31xxx/CVE-2024-31455.json +++ b/2024/31xxx/CVE-2024-31455.json @@ -1,17 +1,100 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-31455", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "security-advisories@github.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Minder by Stacklok is an open source software supply chain security platform. A refactoring in commit `5c381cf` added the ability to get GitHub repositories registered to a project without specifying a specific provider. Unfortunately, the SQL query for doing so was missing parenthesis, and would select a random repository. This issue is patched in pull request 2941. As a workaround, revert prior to `5c381cf`, or roll forward past `2eb94e7`." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", + "cweId": "CWE-200" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "stacklok", + "product": { + "product_data": [ + { + "product_name": "minder", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "= 0.0.39" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/stacklok/minder/security/advisories/GHSA-ggp5-28x4-xcj9", + "refsource": "MISC", + "name": "https://github.com/stacklok/minder/security/advisories/GHSA-ggp5-28x4-xcj9" + }, + { + "url": "https://github.com/stacklok/minder/pull/2941", + "refsource": "MISC", + "name": "https://github.com/stacklok/minder/pull/2941" + }, + { + "url": "https://github.com/stacklok/minder/commit/11b6573ad62cfdd783a8bb52f3fce461466037f4", + "refsource": "MISC", + "name": "https://github.com/stacklok/minder/commit/11b6573ad62cfdd783a8bb52f3fce461466037f4" + }, + { + "url": "https://github.com/stacklok/minder/commit/5c381cfbf3e4b7ce040ed8511a1fae1a78a0014b", + "refsource": "MISC", + "name": "https://github.com/stacklok/minder/commit/5c381cfbf3e4b7ce040ed8511a1fae1a78a0014b" + } + ] + }, + "source": { + "advisory": "GHSA-ggp5-28x4-xcj9", + "discovery": "UNKNOWN" + }, + "impact": { + "cvss": [ + { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "version": "3.1" } ] } diff --git a/2024/3xxx/CVE-2024-3539.json b/2024/3xxx/CVE-2024-3539.json index e829f2a1d0a..e068b7ca147 100644 --- a/2024/3xxx/CVE-2024-3539.json +++ b/2024/3xxx/CVE-2024-3539.json @@ -1,109 +1,17 @@ { - "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", + "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-3539", - "ASSIGNER": "cna@vuldb.com", - "STATE": "PUBLIC" + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" }, "description": { "description_data": [ { "lang": "eng", - "value": "A vulnerability was found in Campcodes Church Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addgiving.php. The manipulation of the argument amount leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259909 was assigned to this vulnerability." - }, - { - "lang": "deu", - "value": "In Campcodes Church Management System 1.0 wurde eine kritische Schwachstelle ausgemacht. Hierbei betrifft es unbekannten Programmcode der Datei /admin/addgiving.php. Dank Manipulation des Arguments amount mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff \u00fcber das Netzwerk. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." - } - ] - }, - "problemtype": { - "problemtype_data": [ - { - "description": [ - { - "lang": "eng", - "value": "CWE-89 SQL Injection", - "cweId": "CWE-89" - } - ] - } - ] - }, - "affects": { - "vendor": { - "vendor_data": [ - { - "vendor_name": "Campcodes", - "product": { - "product_data": [ - { - "product_name": "Church Management System", - "version": { - "version_data": [ - { - "version_affected": "=", - "version_value": "1.0" - } - ] - } - } - ] - } - } - ] - } - }, - "references": { - "reference_data": [ - { - "url": "https://vuldb.com/?id.259909", - "refsource": "MISC", - "name": "https://vuldb.com/?id.259909" - }, - { - "url": "https://vuldb.com/?ctiid.259909", - "refsource": "MISC", - "name": "https://vuldb.com/?ctiid.259909" - }, - { - "url": "https://vuldb.com/?submit.312540", - "refsource": "MISC", - "name": "https://vuldb.com/?submit.312540" - }, - { - "url": "https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%206.pdf", - "refsource": "MISC", - "name": "https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%206.pdf" - } - ] - }, - "credits": [ - { - "lang": "en", - "value": "SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (VulDB User)" - } - ], - "impact": { - "cvss": [ - { - "version": "3.1", - "baseScore": 6.3, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", - "baseSeverity": "MEDIUM" - }, - { - "version": "3.0", - "baseScore": 6.3, - "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", - "baseSeverity": "MEDIUM" - }, - { - "version": "2.0", - "baseScore": 6.5, - "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." } ] } diff --git a/2024/3xxx/CVE-2024-3540.json b/2024/3xxx/CVE-2024-3540.json index 80d80fbbdde..c5ed3f948c9 100644 --- a/2024/3xxx/CVE-2024-3540.json +++ b/2024/3xxx/CVE-2024-3540.json @@ -1,109 +1,17 @@ { - "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", + "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-3540", - "ASSIGNER": "cna@vuldb.com", - "STATE": "PUBLIC" + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" }, "description": { "description_data": [ { "lang": "eng", - "value": "A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_sundaysch.php. The manipulation of the argument Gender leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259910 is the identifier assigned to this vulnerability." - }, - { - "lang": "deu", - "value": "Eine kritische Schwachstelle wurde in Campcodes Church Management System 1.0 ausgemacht. Davon betroffen ist unbekannter Code der Datei /admin/add_sundaysch.php. Mit der Manipulation des Arguments Gender mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." - } - ] - }, - "problemtype": { - "problemtype_data": [ - { - "description": [ - { - "lang": "eng", - "value": "CWE-89 SQL Injection", - "cweId": "CWE-89" - } - ] - } - ] - }, - "affects": { - "vendor": { - "vendor_data": [ - { - "vendor_name": "Campcodes", - "product": { - "product_data": [ - { - "product_name": "Church Management System", - "version": { - "version_data": [ - { - "version_affected": "=", - "version_value": "1.0" - } - ] - } - } - ] - } - } - ] - } - }, - "references": { - "reference_data": [ - { - "url": "https://vuldb.com/?id.259910", - "refsource": "MISC", - "name": "https://vuldb.com/?id.259910" - }, - { - "url": "https://vuldb.com/?ctiid.259910", - "refsource": "MISC", - "name": "https://vuldb.com/?ctiid.259910" - }, - { - "url": "https://vuldb.com/?submit.312541", - "refsource": "MISC", - "name": "https://vuldb.com/?submit.312541" - }, - { - "url": "https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%207.pdf", - "refsource": "MISC", - "name": "https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%207.pdf" - } - ] - }, - "credits": [ - { - "lang": "en", - "value": "SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (VulDB User)" - } - ], - "impact": { - "cvss": [ - { - "version": "3.1", - "baseScore": 6.3, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", - "baseSeverity": "MEDIUM" - }, - { - "version": "3.0", - "baseScore": 6.3, - "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", - "baseSeverity": "MEDIUM" - }, - { - "version": "2.0", - "baseScore": 6.5, - "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." } ] } diff --git a/2024/3xxx/CVE-2024-3541.json b/2024/3xxx/CVE-2024-3541.json index 75966283a95..acfab493eb3 100644 --- a/2024/3xxx/CVE-2024-3541.json +++ b/2024/3xxx/CVE-2024-3541.json @@ -1,109 +1,17 @@ { - "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", + "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-3541", - "ASSIGNER": "cna@vuldb.com", - "STATE": "PUBLIC" + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" }, "description": { "description_data": [ { "lang": "eng", - "value": "A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/admin_user.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259911." - }, - { - "lang": "deu", - "value": "Es wurde eine Schwachstelle in Campcodes Church Management System 1.0 entdeckt. Sie wurde als problematisch eingestuft. Hiervon betroffen ist ein unbekannter Codeblock der Datei /admin/admin_user.php. Durch die Manipulation des Arguments firstname mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." - } - ] - }, - "problemtype": { - "problemtype_data": [ - { - "description": [ - { - "lang": "eng", - "value": "CWE-79 Cross Site Scripting", - "cweId": "CWE-79" - } - ] - } - ] - }, - "affects": { - "vendor": { - "vendor_data": [ - { - "vendor_name": "Campcodes", - "product": { - "product_data": [ - { - "product_name": "Church Management System", - "version": { - "version_data": [ - { - "version_affected": "=", - "version_value": "1.0" - } - ] - } - } - ] - } - } - ] - } - }, - "references": { - "reference_data": [ - { - "url": "https://vuldb.com/?id.259911", - "refsource": "MISC", - "name": "https://vuldb.com/?id.259911" - }, - { - "url": "https://vuldb.com/?ctiid.259911", - "refsource": "MISC", - "name": "https://vuldb.com/?ctiid.259911" - }, - { - "url": "https://vuldb.com/?submit.312542", - "refsource": "MISC", - "name": "https://vuldb.com/?submit.312542" - }, - { - "url": "https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%208.pdf", - "refsource": "MISC", - "name": "https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%208.pdf" - } - ] - }, - "credits": [ - { - "lang": "en", - "value": "SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (VulDB User)" - } - ], - "impact": { - "cvss": [ - { - "version": "3.1", - "baseScore": 3.5, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", - "baseSeverity": "LOW" - }, - { - "version": "3.0", - "baseScore": 3.5, - "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", - "baseSeverity": "LOW" - }, - { - "version": "2.0", - "baseScore": 4, - "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N" + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." } ] } diff --git a/2024/3xxx/CVE-2024-3542.json b/2024/3xxx/CVE-2024-3542.json index b0e414022a4..336a4a2f8a9 100644 --- a/2024/3xxx/CVE-2024-3542.json +++ b/2024/3xxx/CVE-2024-3542.json @@ -1,109 +1,17 @@ { - "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", + "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-3542", - "ASSIGNER": "cna@vuldb.com", - "STATE": "PUBLIC" + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" }, "description": { "description_data": [ { "lang": "eng", - "value": "A vulnerability classified as problematic was found in Campcodes Church Management System 1.0. This vulnerability affects unknown code of the file /admin/add_visitor.php. The manipulation of the argument mobile leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259912." - }, - { - "lang": "deu", - "value": "In Campcodes Church Management System 1.0 wurde eine Schwachstelle entdeckt. Sie wurde als problematisch eingestuft. Betroffen ist eine unbekannte Verarbeitung der Datei /admin/add_visitor.php. Durch Manipulation des Arguments mobile mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk passieren. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." - } - ] - }, - "problemtype": { - "problemtype_data": [ - { - "description": [ - { - "lang": "eng", - "value": "CWE-79 Cross Site Scripting", - "cweId": "CWE-79" - } - ] - } - ] - }, - "affects": { - "vendor": { - "vendor_data": [ - { - "vendor_name": "Campcodes", - "product": { - "product_data": [ - { - "product_name": "Church Management System", - "version": { - "version_data": [ - { - "version_affected": "=", - "version_value": "1.0" - } - ] - } - } - ] - } - } - ] - } - }, - "references": { - "reference_data": [ - { - "url": "https://vuldb.com/?id.259912", - "refsource": "MISC", - "name": "https://vuldb.com/?id.259912" - }, - { - "url": "https://vuldb.com/?ctiid.259912", - "refsource": "MISC", - "name": "https://vuldb.com/?ctiid.259912" - }, - { - "url": "https://vuldb.com/?submit.312544", - "refsource": "MISC", - "name": "https://vuldb.com/?submit.312544" - }, - { - "url": "https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%209.pdf", - "refsource": "MISC", - "name": "https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%209.pdf" - } - ] - }, - "credits": [ - { - "lang": "en", - "value": "SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (VulDB User)" - } - ], - "impact": { - "cvss": [ - { - "version": "3.1", - "baseScore": 3.5, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", - "baseSeverity": "LOW" - }, - { - "version": "3.0", - "baseScore": 3.5, - "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", - "baseSeverity": "LOW" - }, - { - "version": "2.0", - "baseScore": 4, - "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N" + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." } ] }