PT-2023-29135 · Undefined · Undefined

Published 2023-09-28 · Updated 2024-01-02 · CVE-2023-44165

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions process login.php (affected versions not specified)

Description The issue concerns the Password parameter of the process login.php resource, which does not validate the characters received. As a result, these characters are sent unfiltered to the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-44165

Affected Products

Undefined

References · 6

• 🔥 https://fluidattacks.com/advisories/starr · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-44165 · Security Note
• https://twitter.com/CVEnew/status/1707519423853293662 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1707555624416837843 · Twitter Post
• https://t.me/cvenotify/58731 · Telegram Post
• https://t.me/cibsecurity/71249 · Telegram Post