CVE-2023-41507

Summary

CVE-2023-41507 affects the Super Store Finder v3.6 software, introducing multiple SQL injection vulnerabilities. These weaknesses can be exploited through the products, distance, lat, and lng parameters in the store locator component. Successful attacks could result in unauthorized access to sensitive data, modification of records, or even system takeover. Users are encouraged to update to the latest version of the software to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.