CVE-2023-44376: Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Oct 27, 2023

Updated

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Affected Software

1 affected component

Projectworlds Online Art Gallery=1.0

Event History

Oct 27, 2023

CVE Published

12:15 PM

Rejected

12:15 PM

Data Sourced

via NVD·01:15 PM

Description

Frequently Asked Questions

What is CVE-2023-44376?

CVE-2023-44376 is a vulnerability in Online Art Gallery v1.0 that allows multiple Unauthenticated SQL Injection attacks.

What is the severity of CVE-2023-44376?

The severity of CVE-2023-44376 is critical with a CVSS score of 9.8.

How does CVE-2023-44376 affect Online Art Gallery v1.0?

CVE-2023-44376 affects Online Art Gallery v1.0 by allowing attackers to perform multiple Unauthenticated SQL Injection attacks through the 'add2' parameter of the header.php resource.

How can I fix CVE-2023-44376 in Online Art Gallery v1.0?

To fix CVE-2023-44376, it is recommended to validate the characters received in the 'add2' parameter of the header.php resource and sanitize the input before sending it to the database.

Where can I find more information about CVE-2023-44376?

You can find more information about CVE-2023-44376 at the following references: [1] https://https://projectworlds.in/ [2] https://fluidattacks.com/advisories/ono