CVE-2023-47253
critical · 9.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.
9.8
CVSS
14.3%
EPSS (exploit prob.)
96th
EPSS percentile
2023-11-06
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| qualitor | qualitor | <= 8.20 |
Check a specific version with /api/v1/cve/match.
References
- https://openxp.xpsec.co/blog/cve-2023-47253
- https://www.linkedin.com/in/hairrison-wenning-4631a4124/
- https://www.linkedin.com/in/xvinicius/
- https://www.qualitor.com.br/official-security-advisory-cve-2023-47253
- https://www.qualitor.com.br/qualitor-8-20
- https://openxp.xpsec.co/blog/cve-2023-47253
- https://www.linkedin.com/in/hairrison-wenning-4631a4124/
- https://www.linkedin.com/in/xvinicius/
- https://www.qualitor.com.br/qualitor-8-20
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-47253