CVE-2023-36235

An issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via the idorder parameter...

CVE-2023-36235

creationtimestamp| type| source ---|---|--- 2024-01-24 21:16:27+00:00| seen| https://t.me/ctinow/173087 2024-02-10 16:11:41+00:00| seen| https://t.me/ctinow/182600 2025-06-10 16:31:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17928...

CVE-2023-36235

CVE-2023-36235 affects Webkul Qloapps prior to version 1.6.0 , exposing sensitive information via the id_order parameter. The available connected document details indicate an information disclosure risk rooted in handling of the id_order input, enabling an attacker to obtain sensitive data. The v...

CVE-2023-36235

An issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via the idorder parameter...