Lucene search
Fluid AttacksVULNRICHMENT:CVE-2023-44166HistorySep 28, 2023 - 9:51 p.m.
CVE-2023-44166 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
2023-09-2821:51:51
CWE-89
Fluid Attacks
github.com
cve-2023-44166
sql injections
process_registration.php
database
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
High
SSVC
Exploitation
poc
Automatable
yes
Technical Impact
total
The ‘age’ parameter of the process_registration.php resource
does not validate the characters received and they
are sent unfiltered to the database.
Related
cvelist
cvelist
prion
prion
Design/Logic Flaw
2023-09-28 22:15:00
nvd
nvd
CVE-2023-44166
2023-09-28 22:15:10
cve
cve
CVE-2023-44166
2023-09-28 22:15:10
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
High
SSVC
Exploitation
poc
Automatable
yes
Technical Impact
total
Related for VULNRICHMENT:CVE-2023-44166