CVE-2023-33666
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Versions before 0.1.3 of the ai-dev aioptimizedcombinations library were found to contain a SQL injection vulnerability via the component /includes/ajax.php.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.
Recommendation
It is recommended to update the ai-dev aioptimizedcombinations library to version 0.1.3 or later to mitigate this vulnerability.
Other vulnerabilities in /includes/ajax.php
See all- CVE-2023-33665Critical
In ai-dev aitable versions before v0.2.2, a SQL injection vulnerability was discovered in the component /includes/ajax.php.
- CVE-2023-33664High
In versions before 0.3.1 of the ai-dev aicombinationsonfly library, a SQL injection vulnerability was discovered in the /includes/ajax.php component.
Original NVD description (English source)
ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.