Lucene search

K
cveMitreCVE-2023-40748
HistoryAug 28, 2023 - 1:15 p.m.

CVE-2023-40748

2023-08-2813:15:09
CWE-89
mitre
web.nvd.nist.gov
16
cve-2023-40748
phpjabbers
food delivery script
sql injection
nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

49.1%

PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the “q” parameter of index.php.

Affected configurations

Nvd
Node
phpjabbersfood_delivery_scriptMatch3.0
VendorProductVersionCPE
phpjabbersfood_delivery_script3.0cpe:2.3:a:phpjabbers:food_delivery_script:3.0:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

49.1%

Related for CVE-2023-40748