CVE-2023-3152

Опубликовано: 07 июн. 2023

Источник: nvd

CVSS3: 6.3

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.

Ссылки

https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#5sql-injection-vulnerability-in-adminpostsview_postphp
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.231021
Permissions Required
VDB Entry
https://vuldb.com/?id.231021
Third Party Advisory
VDB Entry
https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#5sql-injection-vulnerability-in-adminpostsview_postphp
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.231021
Permissions Required
VDB Entry
https://vuldb.com/?id.231021
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:razormist:online_discussion_forum_site:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00043

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-hg4r-gx6g-m7fr

CVSS3: 6.3

github

больше 2 лет назад

SUSE-SU-2023:3710-1

suse-cvrf

больше 2 лет назад

Security update for openvswitch3

SUSE-SU-2026:0290-1

suse-cvrf

12 дней назад

Security update for openvswitch3

SUSE-SU-2026:0280-1

suse-cvrf

15 дней назад

Security update for openvswitch

EPSS

Процентиль: 13%

0.00043

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89