CVE-2023-38912

Опубликовано: 14 сент. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter.

Ссылки

https://codecanyon.net/item/super-store-finder/3630922
Product
https://packetstormsecurity.com/files/173302/Super-Store-Finder-PHP-Script-3.6-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://codecanyon.net/item/super-store-finder/3630922
Product
https://packetstormsecurity.com/files/173302/Super-Store-Finder-PHP-Script-3.6-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:superstorefinder:php_script:3.6:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04057

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-wx6f-4f38-p25q