CVE-2023-47253

2023-11-0600:00:00

mitre

github.com

qualitor 8.20

remote code execution

php code

gridvalorespophidden parameter

AI Score

8.1

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:qualitor:qalitor:*:*:*:*:*:*:*:*"
    ],
    "vendor": "qualitor",
    "product": "qalitor",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "8.20"
      }
    ],
    "defaultStatus": "unknown"
  }
]