CVE-2023-6414
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-6414 is a newly disclosed vulnerability affecting the Voovi Social Networking Script version 1.0. This issue involves SQL injection, specifically in the perfil.php file where the id and user parameters are processed. Successful exploitation enables a remote attacker to execute malicious SQL queries on the server, potentially gaining access to all stored information within the application. The consequences of this vulnerability could lead to data breaches, privilege escalation, or even complete takeover of the affected system. Users are strongly advised to update their Voovi Social Networking Script as soon as a patch becomes available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.