CVE-2023-49665 in Billing Software

Riassunto

di MITRE • 04/01/2024

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity[]' parameter of the submit_delivery_list.php resource does not validate the characters received and they are sent unfiltered to the database.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Fluid Attacks
• Prenotare: 28/11/2023
• Divulgazione: 04/01/2024
• Moderazione: accettato
• Voce: VDB-249686
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 9.8 (CNA)
• EPSS: 0.00672
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-49665
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-49665
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-49665/