CVE-2023-36213

Summary

CVE-2023-36213 is a newly disclosed SQL injection vulnerability affecting MotoCMS version 3.4.3. An attacker can exploit this flaw by injecting malicious SQL code through the keyword parameter in the search function. Successful exploitation enables the attacker to gain unauthorized privileges, potentially leading to unintended data access or modification. This vulnerability poses a significant risk to websites using the affected MotoCMS version and requires immediate attention from administrators to apply the necessary patches or workarounds.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.