CVE-2023-44377: Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Oct 27, 2023

Updated

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Affected Software

1 affected component

Projectworlds Online Art Gallery=1.0

Event History

Oct 27, 2023

CVE Published

12:15 PM

Rejected

12:15 PM

Data Sourced

via NVD·01:15 PM

Description

Frequently Asked Questions

What is the vulnerability associated with CVE-2023-44377?

The vulnerability associated with CVE-2023-44377 is multiple Unauthenticated SQL Injections (SQLi).

How does the vulnerability affect Online Art Gallery v1.0?

Online Art Gallery v1.0 is affected by multiple Unauthenticated SQL Injection vulnerabilities.

What is the severity of CVE-2023-44377?

The severity of CVE-2023-44377 is critical with a CVSS score of 9.8.

How can I fix the vulnerability in Online Art Gallery v1.0?

To fix the vulnerability in Online Art Gallery v1.0, the 'add3' parameter of the header.php resource needs to be validated and filtered to prevent unauthenticated SQL injections.

Where can I find more information about CVE-2023-44377?

More information about CVE-2023-44377 can be found at the following references: [https://https://projectworlds.in/](https://https://projectworlds.in/) and [https://fluidattacks.com/advisories/ono](https://fluidattacks.com/advisories/ono).