High severity7.5NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026
CVE-2023-53972
CVE-2023-53972
Description
WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- luiswang/WebTareasv5Range: 2.4
- cpe:2.3:a:webtareas_project:webtareas:2.4:-:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51087nvdExploit
- www.vulncheck.com/advisories/webtareas-unauthenticated-sql-injection-via-session-cookie-parameternvdExploitThird Party Advisory
- sourceforge.net/projects/webtareas/nvdProduct
News mentions
0No linked articles in our index yet.