Unscored CVE-2023-43132 EUVD-2023-47551GHSA-hj3x-vg58-rwwg

szvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql injection attacks to obtain the hash of the admi…

Published Sep 25, 2023 · Updated Sep 24, 2024 · Assigned by mitre

Description

szvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql injection attacks to obtain the hash of the administrator password.

References

https://github.com/szvone/vmqphp
https://gist.github.com/8FishMan/d42032b1cdcf401a9c27532aa72ccb37
https://gist.github.com/8FishMan/a37417d1fd97046fb00eb11a257008a7