SQL Injection in Mayurik Dawa-Pharma
CVE-2023-53734
dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive information and potentially gain administrative access.
Vulnerability class: SQL Injection
EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.
Affected products
- Mayurik Dawa-pharma — versions 1.0-2022
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (issue-tracking, product)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)