CVE-2023-41443: SQL Injection
Published Sep 18, 2023
·Updated
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list.
Affected Software
1 affected component
xxyopen Novel-Plus=4.1.0
Event History
Sep 18, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this SQL injection vulnerability?
The vulnerability ID for this SQL injection vulnerability is CVE-2023-41443.
2
What is the affected software?
The affected software is Novel-Plus v.4.1.0.
3
How does this vulnerability occur?
This vulnerability occurs due to a SQL injection vulnerability in the sort parameter in /sys/menu/list.
4
What is the severity of CVE-2023-41443?
The severity of CVE-2023-41443 is high with a CVSS score of 7.2.
5
Is there a fix available for this vulnerability?
Yes, it is recommended to update to a patched version of Novel-Plus.