CVE-2023-7188

A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The manipulation of the argument M_pwd leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-249390 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:fahuo100:fahuo100:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:45

Type Values Removed Values Added
References () https://note.zhaoj.in/share/az24SaQJn1UQ - Broken Link () https://note.zhaoj.in/share/az24SaQJn1UQ - Broken Link
References () https://vuldb.com/?ctiid.249390 - Third Party Advisory () https://vuldb.com/?ctiid.249390 - Third Party Advisory
References () https://vuldb.com/?id.249390 - Third Party Advisory () https://vuldb.com/?id.249390 - Third Party Advisory
CVSS v2 : 4.3
v3 : 8.1
v2 : 4.3
v3 : 5.0

05 Jan 2024, 22:19

Type Values Removed Values Added
References () https://vuldb.com/?ctiid.249390 - () https://vuldb.com/?ctiid.249390 - Third Party Advisory
References () https://note.zhaoj.in/share/az24SaQJn1UQ - () https://note.zhaoj.in/share/az24SaQJn1UQ - Broken Link
References () https://vuldb.com/?id.249390 - () https://vuldb.com/?id.249390 - Third Party Advisory
CPE cpe:2.3:a:fahuo100:fahuo100:*:*:*:*:*:*:*:*
CWE CWE-89
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.1

31 Dec 2023, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-31 15:15

Updated : 2024-11-21 08:45


NVD link : CVE-2023-7188

Mitre link : CVE-2023-7188

CVE.ORG link : CVE-2023-7188


JSON object : View

Products Affected

fahuo100

  • fahuo100
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')