ZeroHour

CVE-2023-50743

PoC
CVSS 3.1
9.8 critical
EPSS
<1%p50
Published
()
Modified
Description

Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource does not validate the characters received and they are sent unfiltered to the database.

Vendors
kashipara
Products
online notice board system
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.