admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-06 10:41:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2023-12-28 17:00:37 +00:00
parent 176d24f73c
commit 4c0a42dbb4
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
36 changed files with 384 additions and 174 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
2018/25xxx/CVE-2018-25096.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2018-25096",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

6
2021/26xxx/CVE-2021-26427.json
View File

@ -76,7 +76,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "15.01.0.0",
"version_name": "15.01.0",
"version_value": "15.01.2308.015"
}
]
@ -88,7 +88,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "15.02.0.0",
"version_name": "15.02.0",
"version_value": "15.02.0922.014"
}
]
@ -113,7 +113,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "CRITICAL",
"baseScore": 9,
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"
}

4
2021/34xxx/CVE-2021-34453.json
View File

@ -52,7 +52,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "15.02.0.0",
"version_name": "15.02.0",
"version_value": "15.02.0922.014"
}
]
@ -64,7 +64,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "15.01.0.0",
"version_name": "15.01.0",
"version_value": "15.01.2308.015"
}
]

2
2021/38xxx/CVE-2021-38662.json
View File

@ -377,7 +377,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/38xxx/CVE-2021-38663.json
View File

@ -377,7 +377,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/38xxx/CVE-2021-38672.json
View File

@ -77,7 +77,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "CRITICAL",
"baseSeverity": "HIGH",
"baseScore": 8,
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"
}

2
2021/40xxx/CVE-2021-40454.json
View File

@ -377,7 +377,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C"
}

2
2021/40xxx/CVE-2021-40455.json
View File

@ -377,7 +377,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"
}

2
2021/40xxx/CVE-2021-40456.json
View File

@ -113,7 +113,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"
}

84
2021/40xxx/CVE-2021-40457.json
View File

@ -1,45 +1,12 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2021-40457",
"ASSIGNER": "secure@microsoft.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Microsoft Dynamics 365 Customer Engagement V9.1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft Dynamics 365 Customer Engagement V9.0",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"description": {
"description_data": [
{
@ -60,6 +27,43 @@
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Microsoft",
"product": {
"product_data": [
{
"product_name": "Microsoft Dynamics 365 Customer Engagement V9.1",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "9.0",
"version_value": "9.1.4"
}
]
}
},
{
"product_name": "Microsoft Dynamics 365 Customer Engagement V9.0",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "9.0.0",
"version_value": "9.0.31.7"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
@ -68,5 +72,15 @@
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40457"
}
]
},
"impact": {
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseScore": 7.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:F/RL:O/RC:C"
}
]
}
}

2
2021/40xxx/CVE-2021-40460.json
View File

@ -341,7 +341,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"
}

14
2021/40xxx/CVE-2021-40461.json
View File

@ -130,18 +130,6 @@
]
}
},
{
"product_name": "Windows 10 Version 20H2",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "10.0.0",
"version_value": "10.0.19042.1288"
}
]
}
},
{
"product_name": "Windows Server version 20H2",
"version": {
@ -185,7 +173,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "CRITICAL",
"baseSeverity": "HIGH",
"baseScore": 8,
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"
}

2
2021/40xxx/CVE-2021-40468.json
View File

@ -137,7 +137,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/40xxx/CVE-2021-40472.json
View File

@ -161,7 +161,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/40xxx/CVE-2021-40475.json
View File

@ -185,7 +185,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/40xxx/CVE-2021-40482.json
View File

@ -65,7 +65,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"
}

2
2021/40xxx/CVE-2021-40483.json
View File

@ -65,7 +65,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "LOW",
"baseSeverity": "HIGH",
"baseScore": 7.6,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C"
}

12
2021/40xxx/CVE-2021-40486.json
View File

@ -118,18 +118,6 @@
]
}
},
{
"product_name": "Microsoft Word 2013 RT Service Pack 1",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "15.0.1",
"version_value": "15.0.5389.1000"
}
]
}
},
{
"product_name": "Microsoft Word 2013 Service Pack 1",
"version": {

2
2021/41xxx/CVE-2021-41332.json
View File

@ -377,7 +377,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/41xxx/CVE-2021-41336.json
View File

@ -77,7 +77,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/41xxx/CVE-2021-41337.json
View File

@ -137,7 +137,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 4.9,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"
}

2
2021/41xxx/CVE-2021-41338.json
View File

@ -233,7 +233,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"
}

2
2021/41xxx/CVE-2021-41339.json
View File

@ -149,7 +149,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 4.7,
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"
}

2
2021/41xxx/CVE-2021-41343.json
View File

@ -377,7 +377,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/41xxx/CVE-2021-41346.json
View File

@ -113,7 +113,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.3,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C"
}

4
2021/41xxx/CVE-2021-41348.json
View File

@ -40,7 +40,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "15.01.0.0",
"version_name": "15.01.0",
"version_value": "15.01.2308.015"
}
]
@ -52,7 +52,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "15.02.0.0",
"version_name": "15.02.0",
"version_value": "15.02.0922.014"
}
]

6
2021/41xxx/CVE-2021-41350.json
View File

@ -40,7 +40,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "15.01.0.0",
"version_name": "15.01.0",
"version_value": "15.01.2308.015"
}
]
@ -52,7 +52,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "15.02.0.0",
"version_name": "15.02.0",
"version_value": "15.02.0922.014"
}
]
@ -101,7 +101,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

106
2021/41xxx/CVE-2021-41352.json
View File

@ -1,55 +1,12 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2021-41352",
"ASSIGNER": "secure@microsoft.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "System Center 2016 Operations Manager",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "System Center 2019 Operations Manager",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "System Center 2012 R2 Operations Manager",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"description": {
"description_data": [
{
@ -70,6 +27,55 @@
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Microsoft",
"product": {
"product_data": [
{
"product_name": "System Center 2016 Operations Manager",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "7.2.0.0",
"version_value": "7.2.12335.0"
}
]
}
},
{
"product_name": "System Center 2019 Operations Manager",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "10.0.0.0",
"version_value": "10.19.10550.0"
}
]
}
},
{
"product_name": "System Center 2012 R2 Operations Manager",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "7.1.0.0",
"version_value": "7.1.10226.1413"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
@ -78,5 +84,15 @@
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41352"
}
]
},
"impact": {
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseScore": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}
]
}
}

4
2021/41xxx/CVE-2021-41353.json
View File

@ -52,7 +52,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "9.1.0",
"version_name": "9.0",
"version_value": "9.1.4"
}
]
@ -77,7 +77,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C"
}

4
2021/41xxx/CVE-2021-41354.json
View File

@ -52,7 +52,7 @@
"version_data": [
{
"version_affected": "<",
"version_name": "9.1.0",
"version_name": "9.0",
"version_value": "9.1.4"
}
]
@ -77,7 +77,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C"
}

2
2021/41xxx/CVE-2021-41355.json
View File

@ -106,7 +106,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.7,
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"
}

2
2021/41xxx/CVE-2021-41361.json
View File

@ -137,7 +137,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C"
}

62
2021/41xxx/CVE-2021-41363.json
View File

@ -1,35 +1,12 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2021-41363",
"ASSIGNER": "secure@microsoft.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Intune management extension",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"description": {
"description_data": [
{
@ -50,6 +27,31 @@
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Microsoft",
"product": {
"product_data": [
{
"product_name": "Intune management extension",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "1.0.0.0",
"version_value": "1.45.204.0"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
@ -58,5 +60,15 @@
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41363"
}
]
},
"impact": {
"cvss": [
{
"version": "3.1",
"baseSeverity": "MEDIUM",
"baseScore": 4.2,
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C"
}
]
}
}

2
2021/42xxx/CVE-2021-42299.json
View File

@ -64,7 +64,7 @@
"cvss": [
{
"version": "3.1",
"baseSeverity": "HIGH",
"baseSeverity": "MEDIUM",
"baseScore": 5.6,
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N/E:P/RL:U/RC:C"
}

95
2023/7xxx/CVE-2023-7131.json
View File

@ -1,17 +1,104 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-7131",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cna@vuldb.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user_registration/ of the component User Registration. The manipulation of the argument userName leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249134 is the identifier assigned to this vulnerability."
},
{
"lang": "deu",
"value": "Eine Schwachstelle wurde in code-projects Intern Membership Management System 2.0 gefunden. Sie wurde als kritisch eingestuft. Hierbei geht es um eine nicht exakt ausgemachte Funktion der Datei /user_registration/ der Komponente User Registration. Mittels Manipulieren des Arguments userName mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-89 SQL Injection",
"cweId": "CWE-89"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "code-projects",
"product": {
"product_data": [
{
"product_name": "Intern Membership Management System",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.0"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://vuldb.com/?id.249134",
"refsource": "MISC",
"name": "https://vuldb.com/?id.249134"
},
{
"url": "https://vuldb.com/?ctiid.249134",
"refsource": "MISC",
"name": "https://vuldb.com/?ctiid.249134"
},
{
"url": "https://github.com/h4md153v63n/CVEs/blob/main/Intern_Membership_Management_System/Intern_Membership_Management_System-SQL-Injection.md",
"refsource": "MISC",
"name": "https://github.com/h4md153v63n/CVEs/blob/main/Intern_Membership_Management_System/Intern_Membership_Management_System-SQL-Injection.md"
}
]
},
"credits": [
{
"lang": "en",
"value": "Hamdi Sevben (VulDB User)"
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"baseScore": 6.3,
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseSeverity": "MEDIUM"
},
{
"version": "3.0",
"baseScore": 6.3,
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseSeverity": "MEDIUM"
},
{
"version": "2.0",
"baseScore": 5.8,
"vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P"
}
]
}

95
2023/7xxx/CVE-2023-7132.json
View File

@ -1,17 +1,104 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-7132",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cna@vuldb.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /user_registration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with the input \"><ScRiPt>confirm(document.domain)</ScRiPt>h0la leads to cross site scripting. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249135."
},
{
"lang": "deu",
"value": "Es wurde eine Schwachstelle in code-projects Intern Membership Management System 2.0 ausgemacht. Sie wurde als problematisch eingestuft. Es betrifft eine unbekannte Funktion der Datei /user_registration/ der Komponente User Registration. Durch das Manipulieren des Arguments userName/firstName/lastName/userEmail mit der Eingabe \"><ScRiPt>confirm(document.domain)</ScRiPt>h0la mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Cross Site Scripting",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "code-projects",
"product": {
"product_data": [
{
"product_name": "Intern Membership Management System",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.0"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://vuldb.com/?id.249135",
"refsource": "MISC",
"name": "https://vuldb.com/?id.249135"
},
{
"url": "https://vuldb.com/?ctiid.249135",
"refsource": "MISC",
"name": "https://vuldb.com/?ctiid.249135"
},
{
"url": "https://github.com/h4md153v63n/CVEs/blob/main/Intern_Membership_Management_System/Intern_Membership_Management_System-Stored_Cross_site_Scripting.md",
"refsource": "MISC",
"name": "https://github.com/h4md153v63n/CVEs/blob/main/Intern_Membership_Management_System/Intern_Membership_Management_System-Stored_Cross_site_Scripting.md"
}
]
},
"credits": [
{
"lang": "en",
"value": "Hamdi Sevben (VulDB User)"
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"baseScore": 3.5,
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseSeverity": "LOW"
},
{
"version": "3.0",
"baseScore": 3.5,
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseSeverity": "LOW"
},
{
"version": "2.0",
"baseScore": 3.3,
"vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:N"
}
]
}