Code injection

2023-11-0606:15:00

PRIOn knowledge base

www.prio-n.com

code injection

qualitor 8.20

remote attackers

arbitrary code execution

php code

html

nvd

8.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON

Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.

CPENameOperatorVersion
qalitorle8.20

CPE	Name	Operator	Version
	qalitor	le	8.20

References

openxp.xpsec.co/blog/cve-2023-47253

www.linkedin.com/in/hairrison-wenning-4631a4124/

www.linkedin.com/in/xvinicius/

www.qualitor.com.br/qualitor-8-20