{"vulnerability": "CVE-2023-3706", "sightings": [{"uuid": "63d94f3a-6ffd-4a64-a94a-4782f3c3c9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37068", "type": "seen", "source": "https://t.me/cibsecurity/68139", "content": "\u203c CVE-2023-37068 \u203c\n\nCode-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password fields, enabling SQL Injection attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T00:15:08.000000Z"}, {"uuid": "2ffc174a-5a35-469f-a5ef-f46983139738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37069", "type": "seen", "source": "https://t.me/cibsecurity/68195", "content": "\u203c CVE-2023-37069 \u203c\n\nCode-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields during the login process, enabling an attacker to inject malicious SQL code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T16:15:47.000000Z"}, {"uuid": "860626f0-4714-4539-8205-74347abf7c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37061", "type": "seen", "source": "https://t.me/cibsecurity/66212", "content": "\u203c CVE-2023-37061 \u203c\n\nChamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T20:18:06.000000Z"}, {"uuid": "0d23c33e-cc7c-4349-bff6-ed742f7712d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37066", "type": "seen", "source": "https://t.me/cibsecurity/66211", "content": "\u203c CVE-2023-37066 \u203c\n\nChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T20:18:05.000000Z"}, {"uuid": "b783f264-27a6-44da-8053-422255b41c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37067", "type": "seen", "source": "https://t.me/cibsecurity/66210", "content": "\u203c CVE-2023-37067 \u203c\n\nChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T20:18:05.000000Z"}, {"uuid": "9e03b285-11c7-4e2c-baad-2f43fb837373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37065", "type": "seen", "source": "https://t.me/cibsecurity/66200", "content": "\u203c CVE-2023-37065 \u203c\n\nChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T20:17:49.000000Z"}, {"uuid": "149fd581-479c-46b2-8f95-56588fd3bb89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37064", "type": "seen", "source": "https://t.me/cibsecurity/66216", "content": "\u203c CVE-2023-37064 \u203c\n\nChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T20:18:13.000000Z"}, {"uuid": "7f9998a0-7d0f-4326-bbae-0d19253c7a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37063", "type": "seen", "source": "https://t.me/cibsecurity/66215", "content": "\u203c CVE-2023-37063 \u203c\n\nChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T20:18:12.000000Z"}, {"uuid": "0e1a3f2c-91ff-4f4b-87be-197d4726024b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37062", "type": "seen", "source": "https://t.me/cibsecurity/66214", "content": "\u203c CVE-2023-37062 \u203c\n\nChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T20:18:08.000000Z"}]}