Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-6418— SQL injection in Voovi Social Networking Script

CVSS 9.8 · Critical EPSS 0.18% · P39
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-6418

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
SQL injection in Voovi Social Networking Script
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the application.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Voovi SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Voovi是Sourceforge开源的一个社交网络脚本。 Voovi 1.0 版本存在SQL注入漏洞，该漏洞源于 videos.php 存在 SQL 注入漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
Voovi Social Networking ScriptVoovi Social Networking Script 1.0 -

II. Public POCs for CVE-2023-6418

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-6418

请登录查看更多情报信息。

Same Patch Batch · Voovi Social Networking Script · 2023-11-30 · 11 CVEs total

CVE-2023-64109.8 CRITICALSQL injection in Voovi Social Networking Script
CVE-2023-64119.8 CRITICALSQL injection in Voovi Social Networking Script
CVE-2023-64129.8 CRITICALSQL injection in Voovi Social Networking Script
CVE-2023-64139.8 CRITICALSQL injection in Voovi Social Networking Script
CVE-2023-64149.8 CRITICALSQL injection in Voovi Social Networking Script
CVE-2023-64159.8 CRITICALSQL injection in Voovi Social Networking Script
CVE-2023-64169.8 CRITICALSQL injection in Voovi Social Networking Script
CVE-2023-64179.8 CRITICALSQL injection in Voovi Social Networking Script
CVE-2023-64196.5 MEDIUMCross-site Scripting vulnerability in Voovi Social Networking Script
CVE-2023-64206.5 MEDIUMCross-site Scripting vulnerability in Voovi Social Networking Script

IV. Related Vulnerabilities

Same product: Voovi Social Networking Script
Same vendor: Voovi Social Networking Script
Same weakness: CWE-89

V. Comments for CVE-2023-6418

No comments yet

Leave a comment