CVE-2023-43836: SQL Injection
Published Oct 2, 2023
·Updated
There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information
Affected Software
1 affected component
Jizhicms JIZHICMS=2.4.9
Event History
Oct 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-43836?
The severity of CVE-2023-43836 is medium with a severity value of 6.5.
2
How can users exploit the SQL injection vulnerability in Jizhicms 2.4.9 backend?
Users can exploit the SQL injection vulnerability in Jizhicms 2.4.9 backend to obtain database information.
3
Which version of Jizhicms is affected by CVE-2023-43836?
Jizhicms version 2.4.9 is affected by CVE-2023-43836.
4
Is there a fix available for CVE-2023-43836?
It is recommended to update Jizhicms to a version that is not affected by CVE-2023-43836.
5
Where can I find more information about CVE-2023-43836?
You can find more information about CVE-2023-43836 on the GitHub repository and Gist provided in the references.