Chiaki2333

[CVE ID]
CVE-2023-49030
[PRODUCT]
https://github.com/32ns/KLive
[VERSION]
32ns/KLive - <=2019-1-19
[PROBLEM TYPE]
SQL Injection
[DESCRIPTION]
SQL Injection vulnerability in 32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component.

Chiaki2333

[CVE ID]
CVE-2023-49029
[PRODUCT]
https://github.com/smpn1smg/absis
[VERSION]
smpn1smg/absis - <=2017-10-19
[PROBLEM TYPE]
Cross Site Scripting (XSS)
[DESCRIPTION]
Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file.

Chiaki2333

[CVE ID]
CVE-2023-49028
[PRODUCT]
https://github.com/smpn1smg/absis
[VERSION]
smpn1smg/absis - <=2017-10-19
[PROBLEM TYPE]
Cross Site Scripting (XSS)
[DESCRIPTION]
Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file.

Chiaki2333

[CVE ID]
CVE-2023-43381
[PRODUCT]
https://github.com/tianchoy/blog
[VERSION]
v1.8.8
[PROBLEM TYPE]
SQL Injection
[DESCRIPTION]
SQL Injection exists in tianchoy/blog through 2018-06-19 via the user parameter to login.php.