NA

CVE-2023-31753

Published: 20/07/2023 Updated: 27/07/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an malicious user to execute arbitrary SQL commands via the "rid=" parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

endonesia endonesia 8.7

Github Repositories

Proof of Concept for CVE-2023-31753 - eNdonesia Portal 8.7

Proof of Concept for CVE-2023-31753 Description: A SQL Injection vulnerability was discovered in eNdonesia Portal v87 which is exploited upon inserting crafted payload into "rid" parameter in diskusiphp Exploit Title: eNdonesia Portal 87 - SQL injection vulnerability in diskusiphp (rid parameter) Date: May 19, 2023 Exploit Author: Kunal Khubchandani Vendor Homep