CVE-2023-43738: Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Oct 27, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Art Gallery=1.0
Event History
Oct 27, 2023
CVE Published
02:04 AM
Rejected
02:04 AM
Data Sourced
via NVD·03:15 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-43738.
2
What is the severity of CVE-2023-43738?
The severity of CVE-2023-43738 is critical with a CVSS score of 9.8.
3
Which software versions are affected by this vulnerability?
The Online Art Gallery v1.0 is affected by this vulnerability.
4
How does the vulnerability manifest?
The 'email' parameter of the header.php resource allows unauthenticated SQL injections, which are sent unfiltered to the database.
5
Are there any references or resources related to this vulnerability?
Yes, you can find more information about this vulnerability at the following links: [Projectworlds](https://projectworlds.in/) and [Fluid Attacks](https://fluidattacks.com/advisories/ono).