← All advisories

Medium severity6.5NVD Advisory· Published Oct 2, 2023· Updated Jun 17, 2026

CVE-2023-43836

CVE-2023-43836

Description

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information

Affected products

4

Jizhicms/Jizhicms3 versions
cpe:2.3:a:jizhicms:jizhicms:2.4.9:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:jizhicms:jizhicms:2.4.9:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: = 2.4.9
Fliggyaaa/jizhicmssqlllm-create

Patches

Vulnerability mechanics

References

1

gist.github.com/Fliggyaaa/417f8335ce0f0546e95dda91d4b54604nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.