CVE-2023-40748
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk85th percentile - higher than 85% of all known CVEs
Summary
PHPJabbers Food Delivery Script version 3.0 has a SQL injection (SQLi) vulnerability in the 'q' parameter of index.php.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.
Recommendation
It is recommended to update the script to the latest version and implement input filtering and validation to minimize the risk of SQL injection.
Other vulnerabilities in PHPJabbers Food Delivery Script 3.0
See all- CVE-2023-40757Critical
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
- CVE-2023-40749Critical
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the 'column' parameter of index.php.
Original NVD description (English source)
PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.