high7.5
CVE-2023-43381
SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php
Impact
SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tianchoy | Blog | Version 1.8.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/Chiaki2333/59ef607c3eb3a7b4db1537705d05e4d1
- https://github.com/Chiaki2333/vulnerability/blob/main/tianchoy-blog-sql-login.php.md
- https://gist.github.com/Chiaki2333/59ef607c3eb3a7b4db1537705d05e4d1
- https://github.com/Chiaki2333/vulnerability/blob/main/tianchoy-blog-sql-login.php.md