CVE-2023-43979
First published: Wed Nov 15 2023(Updated: )
ETS Soft ybc_blog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component Ybc_blogBlogModuleFrontController::getPosts().
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Prestahero Ybc Blog | <4.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID is CVE-2023-43979.
What is the severity of CVE-2023-43979?
The severity of CVE-2023-43979 is critical (9.8).
How can the SQL injection vulnerability be exploited?
The SQL injection vulnerability in ETS Soft ybc_blog before v4.4.0 can be exploited through the component Ybc_blogBlogModuleFrontController::getPosts().
What software versions are affected by CVE-2023-43979?
Prestahero Ybc Blog versions up to (but not including) 4.4.0 are affected.
Is there a fix available for CVE-2023-43979?
Yes, updating to version 4.4.0 or higher of ETS Soft ybc_blog will fix the vulnerability.
- collector/mitre-cve
- collector/nvd-api
- vendor/prestahero
- product/ybc blog
- canonical/prestahero ybc blog