Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-38825

Published: 21/03/2024 Updated: 21/03/2024

Vulnerability Summary

SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote malicious user to obtain sensitive information via the password reset mechanism in MyCapMobileApp/update.php.

Github Repositories

https://github.com/ntrampham/REDCap

CVE-2023-38825: SQL Injection in REDCap Versions <1380 Issue Summary An SQL Injection vulnerability was found on /<redcap_version>/MyCapMobileApp/updatephp API Because of lacking of verifying untrusted data $_POST['index_modal_update'] results in malicious payload being passed to the SQL query via the $page_id variable After sending the mali

References

https://www.project-redcap.org/https://github.com/ntrampham/REDCaphttps://nvd.nist.govhttps://github.com/ntrampham/REDCap
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654CVE-2023-49606encryptionNULL pointer dereferenceCVE-2024-4439CVE-2024-4649race conditionCVE-2024-27202CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook