CVE-2023-43737: Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Oct 26, 2023

Updated

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Affected Software

1 affected component

Projectworlds Online Art Gallery=1.0

Event History

Oct 26, 2023

CVE Published

10:22 PM

Rejected

10:22 PM

Data Sourced

via NVD·11:15 PM

Description

Frequently Asked Questions

What is CVE-2023-43737?

CVE-2023-43737 is a vulnerability in the Online Art Gallery v1.0 that allows for multiple unauthenticated SQL injections.

How severe is CVE-2023-43737?

CVE-2023-43737 has a severity rating of 9.8, which is considered critical.

How does CVE-2023-43737 affect the Online Art Gallery software?

CVE-2023-43737 affects the 'fnm' parameter of the header.php resource in the Online Art Gallery v1.0 software, allowing unauthenticated SQL injections.

How can I fix CVE-2023-43737?

To fix CVE-2023-43737, it is recommended to update the Online Art Gallery software to a secure version that properly validates input and filters characters sent to the database.

Are there any references for CVE-2023-43737?

Yes, you can find more information about CVE-2023-43737 at the following references: [Link 1](https://https://projectworlds.in/) [Link 2](https://fluidattacks.com/advisories/ono)