Lucene search
HistoryJul 18, 2023 - 12:15 p.m.
CVE-2023-3743
cve-2023-3743
sql query
remote attacker
database retrieval
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
53.9%
Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the product_one_img parameter to retrieve the information stored in the database.
Affected configurations
Node
leothemesap_page_builderRange<1.7.8.2prestashop
| Vendor | Product | Version | CPE |
|---|---|---|---|
| leothemes | ap_page_builder | * | cpe:2.3:a:leothemes:ap_page_builder:*:*:*:*:*:prestashop:*:* |
Related
prion
prion
Design/Logic Flaw
2023-07-18 12:15:00
cvelist
cvelist
CVE-2023-3743 SQL injection vulnerability in LeoTheme's Ap Page Builder
2023-07-18 11:56:05
cve
cve
CVE-2023-3743
2023-07-18 12:15:12
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
53.9%
Related for NVD:CVE-2023-3743