CVE-2023-5221

Summary

CVE-2023-5221 is a newly disclosed critical vulnerability in ForU CMS. The issue lies within the /install/index.php file, allowing an attacker to inject code by manipulating the db_name argument. This vulnerability can be exploited remotely, making it a significant threat. The exploit for this vulnerability has been made public, increasing the risk for potential attacks. Unfortunately, the vendor did not respond to early disclosure efforts, leaving users uninformed about affected and unaffected releases. The associated identifier for this vulnerability is VDB-240363.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.