CVE-2023-33664
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
In versions before 0.3.1 of the ai-dev aicombinationsonfly library, a SQL injection vulnerability was discovered in the /includes/ajax.php component.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database and exposure of sensitive information.
Recommendation
It is recommended to update the ai-dev aicombinationsonfly library to version 0.3.1 or later to mitigate this vulnerability.
Other vulnerabilities in /includes/ajax.php
See all- CVE-2023-33665Critical
In ai-dev aitable versions before v0.2.2, a SQL injection vulnerability was discovered in the component /includes/ajax.php.
- CVE-2023-33666Critical
Versions before 0.1.3 of the ai-dev aioptimizedcombinations library were found to contain a SQL injection vulnerability via the component /includes/ajax.php.
Original NVD description (English source)
ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.