CVE-2023-50752 in Online Notice Board System

Riassunto

di MITRE • 04/01/2024

Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Fluid Attacks
• Prenotare: 12/12/2023
• Divulgazione: 04/01/2024
• Moderazione: accettato
• Voce: VDB-249692
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 9.8 (CNA)
• EPSS: 0.00672
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-50752
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-50752
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-50752/