CVE-2023-43835

2023-10-0200:00:00

mitre

www.cve.org

super store finder

authenticated

arbitrary

php code injection

remote code execution

settings overwrite config.inc.php content

cve-2023-43835

AI Score

9.2

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content.

References

packetstormsecurity.com/files/174756/Super-Store-Finder-3.7-Remote-Command-Execution.html