CVE-2023-47253
90Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 9.8epss 14%
from disclosure to weapon318 days
Published on NVDNov 6
1st PoC+318d
VulnCheck+869d
exploitation probability
14%top 4% of all CVEs
observed exploitation
yesVulnCheck
5 public exploit(s)
Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 5
githubgithub.com/gmh5225/CVE-2023-47253★ 0githubgithub.com/OpenXP-Research/CVE-2023-47253★ 0vulncheckvulncheck.com/xdb/3c08c59f789aunverifiedvulncheckvulncheck.com/xdb/035eadde9db3unverifiedvulncheckvulncheck.com/xdb/af667b02ae91unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.