CVE-2023-47253

2023-11-0600:00:00

mitre

www.cve.org

qualitor 8.20 remote code execution

php

html/ad/adpesquisasql/request/processvariavel.php

AI Score

Confidence

High

EPSS

0.006

Percentile

78.8%

JSON

Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.

References

openxp.xpsec.co/blog/cve-2023-47253

www.linkedin.com/in/hairrison-wenning-4631a4124/

www.linkedin.com/in/xvinicius/

www.qualitor.com.br/qualitor-8-20