Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-39796
HistoryNov 10, 2023 - 12:00 a.m.

CVE-2023-39796

2023-11-1000:00:00
mitre
github.com
sql injection
wbce cms
remote attacker
arbitrary code

AI Score

9.1

Confidence

Low

EPSS

0.069

Percentile

94.1%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter.

AI Score

9.1

Confidence

Low

EPSS

0.069

Percentile

94.1%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total