CVE-2023-4407 | Severity.io

Description

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/account_statement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-237511.

Related CPE's

credit_lite_project

credit_lite

1.5.4

Vulnerable

References

http://packetstormsecurity.com/files/174244/Credit-Lite-1.5.4-SQL-Injection.html

ExploitThird Party AdvisoryVDB Entry

https://vuldb.com/?ctiid.237511

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.237511

Permissions RequiredThird Party Advisory