CVE-2023-44375 in Online Art Gallery

Resumen

por MITRE • 2023-10-27

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add1' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Fluid Attacks
• Reservar: 2023-09-28
• Divulgación: 2023-10-27
• Moderación: aceptado
• Artículo: VDB-243674
• CPE: listo
• CWE: CWE-89 (confirmado)
• CVSS: 9.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Police, Agriculture, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-44375
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-44375
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-44375/