medium6.5
CVE-2023-43132
szvone vmqphp <=1.13 is vulnerable to SQL Injection.
Impact
szvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql injection attacks to obtain the hash of the administrator password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Szvone | Vmqphp | through 1.13 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/8FishMan/a37417d1fd97046fb00eb11a257008a7
- https://gist.github.com/8FishMan/d42032b1cdcf401a9c27532aa72ccb37
- https://github.com/szvone/vmqphp
- https://gist.github.com/8FishMan/a37417d1fd97046fb00eb11a257008a7
- https://gist.github.com/8FishMan/d42032b1cdcf401a9c27532aa72ccb37
- https://github.com/szvone/vmqphp