CVE Catalog

CVE-2023-40749

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
3.31%

87th percentile - higher than 87% of all known CVEs

Summary

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the 'column' parameter of index.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to update the script to the latest version and validate and sanitize input data in the application.

Original NVD description (English source)

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS