CVE-2023-43132

2023-09-2500:00:00

mitre

www.cve.org

vmqphp

sql injection

vulnerability

cve-2023-43132

administrator password

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

JSON

szvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql injection attacks to obtain the hash of the administrator password.

References

gist.github.com/8FishMan/a37417d1fd97046fb00eb11a257008a7

gist.github.com/8FishMan/d42032b1cdcf401a9c27532aa72ccb37

github.com/szvone/vmqphp