CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.15% chance of exploitation in the next 30 days, 65th percentile

Published

2023-09-27

Updated

2026-07-09

Proof-of-concept exploits (1)

• https://gist.github.com/RNPG/c1ae240f2acec138132aa64ce3faa2e0

References

• CVE Record
• NVD entry

Related

• CVE-2023-41448
• CVE-2023-4145
• CVE-2023-41447
• CVE-2023-41450
• CVE-2023-41446
• CVE-2023-41451