by Kastro
Paper/Archive/CVE-2023-41507

CVE-2023-41507

mitre — Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products,…

EPSS 1.0%public exploitCVSS 9.8
critical.is priorityof 100
52
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 62.5.625 × 2012.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refsuperstorefinder.net/support/forums/topic/super-store-finder-patch-notesrefgithub.com/redblueteam/CVE-2023-41507