CVE-2023-4446
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
A critical vulnerability was found in OpenRapid RapidCMS version 1.3.1, affecting an unknown part of the file template/default/category.php. Manipulation of the argument id leads to SQL injection.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.
Recommendation
It is recommended to update OpenRapid RapidCMS to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in OpenRapid RapidCMS 1.3.1
See all- CVE-2023-4448Medium
A critical vulnerability was found in OpenRapid RapidCMS version 1.3.1, affecting unknown processing of the file admin/run-movepass.php. Manipulation of the arguments password/password2 leads to weak password recovery.
- CVE-2023-4447Medium
A critical vulnerability has been found in OpenRapid RapidCMS version 1.3.1, affecting unknown code in the file admin/article-chat.php. Manipulation of the argument id leads to SQL injection.
Original NVD description (English source)
A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237567.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS