diff --git a/advisories/unreviewed/2024/03/GHSA-6h2q-2x4r-5652/GHSA-6h2q-2x4r-5652.json b/advisories/unreviewed/2024/03/GHSA-6h2q-2x4r-5652/GHSA-6h2q-2x4r-5652.json index 6fca49affed..6d079f8605a 100644 --- a/advisories/unreviewed/2024/03/GHSA-6h2q-2x4r-5652/GHSA-6h2q-2x4r-5652.json +++ b/advisories/unreviewed/2024/03/GHSA-6h2q-2x4r-5652/GHSA-6h2q-2x4r-5652.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6h2q-2x4r-5652", - "modified": "2024-03-19T12:30:41Z", + "modified": "2024-03-19T21:30:29Z", "published": "2024-03-19T12:30:41Z", "aliases": [ "CVE-2024-2615" @@ -22,6 +22,10 @@ "type": "WEB", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1881074%2C1882438" }, + { + "type": "WEB", + "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1881074%2C1882438%2C1881650" + }, { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2024-12" diff --git a/advisories/unreviewed/2024/03/GHSA-rq8w-523x-4r76/GHSA-rq8w-523x-4r76.json b/advisories/unreviewed/2024/03/GHSA-rq8w-523x-4r76/GHSA-rq8w-523x-4r76.json new file mode 100644 index 00000000000..22f202abd32 --- /dev/null +++ b/advisories/unreviewed/2024/03/GHSA-rq8w-523x-4r76/GHSA-rq8w-523x-4r76.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rq8w-523x-4r76", + "modified": "2024-03-19T21:30:29Z", + "published": "2024-03-19T21:30:29Z", + "aliases": [ + "CVE-2024-28303" + ], + "details": "Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28303" + }, + { + "type": "WEB", + "url": "https://github.com/onurkarasalihoglu/vulnerability-disclosures/blob/main/omos-sql-injection.md" + }, + { + "type": "WEB", + "url": "https://github.com/onurkarasalihoglu/vulnerability-disclosures/blob/main/omos_sqli_exploit.py" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-03-19T19:15:06Z" + } +} \ No newline at end of file