CVE-2023-36076 - SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php

Back Back to CVE browser

CRITICAL

SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php

Published Sep 1, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 2.81%

Description

SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (1)

https://github.com/lkw199711/smanga/issues/100
ExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://github.com/lkw199711/smanga/issues/100		ExploitIssue TrackingThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 1, 2023

Updated Oct 1, 2024

Reserved Jun 21, 2023

Link CVE-2023-36076

CISA Vulnrichment

Updated Oct 1, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-36076

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-36076