OpenRapid RapidCMS article-chat.php sql injection

CVE-2023-4447

What is CVE-2023-4447?

A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1, specifically in the code handling requests to admin/article-chat.php. An attacker can exploit this flaw by manipulating the 'id' argument, allowing unauthorized access to the underlying database. This vulnerability can be exploited remotely, posing significant risks of data compromise. The public disclosure of this exploit increases the urgency for affected users to address the security flaw.

References