CVE-2023-44267

Summary

CVE-2023-44267: Online Art Gallery version 1.0 contains unauthenticated SQL injection vulnerabilities. The header.php file fails to validate user input for the 'lnm' parameter, allowing malicious actors to inject malicious SQL queries directly into the database. This issue can lead to unauthorized access, data theft, or server takeover. Users are strongly advised to update to a patched version or apply appropriate input validation techniques to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.