CVE-2023-47990: SQL Injection
Published Dec 20, 2023
·Updated
SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter.
Affected Software
1 affected component
CuppaCMS CuppaCMS=1.0
Event History
Dec 20, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-47990?
CVE-2023-47990 has a high severity rating due to its potential to allow attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2023-47990?
To fix CVE-2023-47990, you should validate and sanitize the input parameters in the affected script, specifically in edit_admin_table.php.
3
What impact does CVE-2023-47990 have on CuppaCMS?
CVE-2023-47990 allows attackers to manipulate the database through SQL injection, leading to data breaches or loss.
4
Which version of CuppaCMS is affected by CVE-2023-47990?
CVE-2023-47990 affects CuppaCMS version 1.0 only.
5
Can CVE-2023-47990 be exploited remotely?
Yes, CVE-2023-47990 can be exploited remotely if an attacker has access to the vulnerable components of the application.