Lucene search

K
nvd[email protected]NVD:CVE-2023-47990
HistoryDec 20, 2023 - 7:15 p.m.

CVE-2023-47990

2023-12-2019:15:10
CWE-89
web.nvd.nist.gov
4
cuppacms
sql injection
edit admin table
table parameter
arbitrary sql commands

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.0%

SQL Injection vulnerability in components/table_manager/html/edit_admin_table.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter.

Affected configurations

Nvd
Node
cuppacmscuppacmsMatch1.0
VendorProductVersionCPE
cuppacmscuppacms1.0cpe:2.3:a:cuppacms:cuppacms:1.0:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.0%

Related for NVD:CVE-2023-47990