CVE-2023-4446

Summary

A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237567.

Affected Software

Weaknesses

• CWE-89: CWE-89 SQL Injection

ADP Enrichment

CVE Program Container

Additional References

• https://vuldb.com/?id.237567
• https://vuldb.com/?ctiid.237567
• https://github.com/OpenRapid/rapidcms/issues/3

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/?id.237567
• https://vuldb.com/?ctiid.237567
• https://github.com/OpenRapid/rapidcms/issues/3

• ←Previous
• Next→