Critical severity9.8NVD Advisory· Published Sep 14, 2023· Updated Jun 17, 2026

CVE-2023-38912

Description

SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter.

Affected products

Superstorefinder/Super Store Finderllm-fuzzy
Range: <3.6
Codecanyon/Super Store Finderllm-create
Range: <3.6
Super Store Finder PHP Script/Super Store Finder PHP Scriptdescription
Superstorefinder/PHP Script
cpe:2.3:a:superstorefinder:php_script:3.6:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/173302/Super-Store-Finder-PHP-Script-3.6-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
codecanyon.net/item/super-store-finder/3630922nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000