Critical severity9.8NVD Advisory· Published Nov 6, 2023· Updated Jun 17, 2026

CVE-2023-47253

Description

Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qualitor/Qualitor3 versions
cpe:2.3:a:qualitor:qualitor:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:qualitor:qualitor:*:*:*:*:*:*:*:*range: <=8.20
- (no CPE)
- (no CPE)range: <=8.20

Patches

Vulnerability mechanics

References

openxp.xpsec.co/blog/cve-2023-47253nvdExploitThird Party Advisory
www.qualitor.com.br/official-security-advisory-cve-2023-47253nvdVendor Advisory
www.linkedin.com/in/hairrison-wenning-4631a4124/nvdNot Applicable
www.linkedin.com/in/xvinicius/nvdPermissions Required
www.qualitor.com.br/qualitor-8-20nvdProductRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.012
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000