github.com
https://github.com/msd0pe-1/chitor-sqli CVE-2023-31714
CRITICAL
Chitor-CMS v1.1.2 - Pre-Auth SQL Injection
Record summary
CVE-2023-31714 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 1, 2024 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBChitor-CMS v1.1.2 - Pre-Auth SQL InjectionExploitDB exploitby msd0peNot analyzed1 file
References
5github.com
https://github.com/waqaskanju/Chitor-CMS/commit/69d34420ad382c91b0c285432418c1b0810128c1 github.com
https://github.com/waqaskanju/Chitor-CMS/releases/tag/Chitor-cms nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-31714 exploit-db.com
https://www.exploit-db.com/exploits/51383