{"vulnerability": "CVE-2023-4649", "sightings": [{"uuid": "80d0a5c0-a212-4f45-8e9a-c164299c389e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46495", "type": "seen", "source": "https://t.me/ctinow/161147", "content": "https://ift.tt/Oup3w4C\nCVE-2023-46495 | EverShop NPM up to 1.0.0-rc.7 Request sortBy cross site scripting", "creation_timestamp": "2023-12-31T17:41:51.000000Z"}, {"uuid": "9be3dd19-316e-48be-a2e7-d0d63382f985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46499", "type": "seen", "source": "https://t.me/ctinow/161203", "content": "https://ift.tt/gk9Vz2u\nCVE-2023-46499 | EverShop NPM up to 1.0.0-rc.4 Admin Panel cross site scripting", "creation_timestamp": "2024-01-01T06:51:30.000000Z"}, {"uuid": "85d2686f-f6c2-4b0d-b26a-1dd1fd199c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4649", "type": "seen", "source": "https://t.me/cibsecurity/69511", "content": "\u203c CVE-2023-4649 \u203c\n\nSession Fixation in GitHub repository instantsoft/icms2 prior to 2.16.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T09:42:40.000000Z"}, {"uuid": "ef14402d-e613-4db6-b97c-119a08b7c917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46493", "type": "seen", "source": "https://t.me/ctinow/161146", "content": "https://ift.tt/tZ7rqNG\nCVE-2023-46493 | EverShop NPM up to 1.0.0-rc.7 Request fileBrowser/browser.js readDirSync path traversal", "creation_timestamp": "2023-12-31T17:41:50.000000Z"}, {"uuid": "23973402-8ec5-400f-b3ab-c6d550694da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46498", "type": "seen", "source": "https://t.me/ctinow/161145", "content": "https://ift.tt/kIK64iW\nCVE-2023-46498 | EverShop NPM up to 1.0.0-rc.7 route.json information disclosure", "creation_timestamp": "2023-12-31T17:41:49.000000Z"}, {"uuid": "f74407b1-e1c5-43dd-8927-800a99606af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46497", "type": "seen", "source": "https://t.me/ctinow/161140", "content": "https://ift.tt/Ou6jega\nCVE-2023-46497 | EverShop NPM up to 1.0.0-rc.7 Request createFolder.js mkdirSync path traversal", "creation_timestamp": "2023-12-31T17:11:33.000000Z"}, {"uuid": "d418a70b-3135-45a7-aa46-7ade3da4049a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46496", "type": "seen", "source": "https://t.me/ctinow/161139", "content": "https://ift.tt/nHS4g0V\nCVE-2023-46496 | EverShop NPM up to 1.0.0-rc.7 Request api/files DELETE path traversal", "creation_timestamp": "2023-12-31T17:11:32.000000Z"}, {"uuid": "71ab58f6-5493-4ded-bb66-43bcccf6aaa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46494", "type": "seen", "source": "https://t.me/ctinow/161141", "content": "https://ift.tt/dqTOhX2\nCVE-2023-46494 | EverShop NPM up to 1.0.0-rc.4 Grid.jsx ProductGrid cross site scripting", "creation_timestamp": "2023-12-31T17:11:35.000000Z"}]}