CVE Catalog
CVE-2023-36311
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.66%
47th percentile - higher than 47% of all known CVEs
Summary
In version 1.0 of PHPJabbers Document Creator, there is a SQL injection (SQLi) vulnerability in the 'column' parameter of index.php.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update to the latest version of the software and to validate and sanitize input data in the application.
Original NVD description (English source)
There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.