CVE-2023-54000 to CVE-2023-54999

43 CVEs with public proof-of-concept exploits.

• CVE-2023-541631 PoCNLB mKlik Macedonia 3.3.12 SQL Injection via International Transfer Parameters
• CVE-2023-543271 PoCTinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change
• CVE-2023-543282 PoCsAimOne Video Converter 2.04 Build 103 Buffer Overflow in Registration Form
• CVE-2023-543292 PoCsInbit Messenger 4.9.0 - Unauthenticated Remote Command Execution (RCE)
• CVE-2023-543302 PoCsInbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow
• CVE-2023-543311 PoCOutline 1.6.0 - Unquoted Service Path
• CVE-2023-543321 PoCJetpack 11.4 - Cross Site Scripting (XSS)
• CVE-2023-543331 PoCSocial-Share-Buttons 2.2.3 - SQL Injection via project_id Parameter
• CVE-2023-543341 PoCExplorer32++ 1.3.5.531 - Buffer overflow
• CVE-2023-543351 PoCeXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)
• CVE-2023-543361 PoCMediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path
• CVE-2023-543372 PoCsSysax Multi Server 6.95 - 'Password' Denial of Service (PoC)
• CVE-2023-543381 PoCTftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service Path
• CVE-2023-543391 PoCWebgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameter
• CVE-2023-543401 PoCWorkOrder CMS 0.1.0 - SQL Injection
• CVE-2023-543411 PoCWebgrind 1.1 - Reflected Cross-Site Scripting (XSS) via file Parameter
• CVE-2023-543421 PoCEclipse Equinox OSGi 3.8-3.18 Console Remote Code Execution
• CVE-2023-543431 PoCQWE DL 2.0.1 Persistent XSS Vulnerability via Path Parameter
• CVE-2023-543441 PoCEclipse Equinox OSGi 3.7.2 Remote Code Execution via Console
• CVE-2023-543451 PoCFrappe Framework ERPNext 13.4.0 Remote Code Execution
• CVE-2023-543461 PoCWordPress Plugin Backup Migration 1.2.8 Unauthenticated Database Backup Download
• CVE-2023-543471 PoCOpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass
• CVE-2023-543481 PoCERPGo SaaS 3.9 CSV Injection via Vendor Creation
• CVE-2023-543491 PoCAmazCart CMS 3.4 Reflected Cross-Site Scripting via Search
• CVE-2023-543501 PoCWordPress Augmented-Reality Plugin Remote Code Execution Unauthenticated
• CVE-2023-543511 PoCWordPress Sonaar Music Plugin 4.7 Stored XSS via Comments
• CVE-2023-543521 PoCWordPress Seotheme Remote Code Execution Unauthenticated
• CVE-2023-543531 PoCChromacam 4.0.3.0 Unquoted Service Path Privilege Escalation
• CVE-2023-543571 PoCJoomla com_booking 2.4.9 Information Disclosure via Account Enumeration
• CVE-2023-543581 PoCWordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile
• CVE-2023-543591 PoCWordPress adivaha Travel Plugin 2.3 SQL Injection via pid
• CVE-2023-543601 PoCJoomla JLex Review 6.0.1 Reflected XSS via review_id Parameter
• CVE-2023-543611 PoCJoomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword
• CVE-2023-543621 PoCJoomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
• CVE-2023-543631 PoCJoomla Solidres 2.13.3 Reflected XSS via Multiple Parameters
• CVE-2023-543641 PoCJoomla HikaShop 4.7.4 Reflected XSS via Product Filter
• CVE-2023-543914 PoCsProxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter
• CVE-2023-543982 PoCsYonyou U8 Cloud Java Deserialization RCE via FileManageServlet
• CVE-2023-543993 PoCsHongjing e-HR < 8.2 SQL Injection via /servlet/codesettree
• CVE-2023-544001 PoCFumeng Cloud SQL Injection via AjaxMethod.ashx getEmpByname
• CVE-2023-544021 PoCiDocView SSRF via /doc/upload Endpoint Hardcoded Token
• CVE-2023-544031 PoCYonyou U8 CRM Arbitrary File Read via getemaildata.php
• CVE-2023-544051 PoCH3C CVM Unauthenticated File Upload via fileUpload/upload Token