CVE-2023-7183

Summary

CVE-2023-7183 is a newly disclosed critical vulnerability affecting versions up to 1.0_build20230805 of 7-card Fakabao. This vulnerability is linked to an unknown functionality within the file shop/alipay_notify.php. An attacker can manipulate the out_trade_no argument, resulting in SQL injection. The exploit for this vulnerability has been made public, increasing the risk of exploitation. The vulnerability has been assigned the identifier VDB-249385. Unfortunately, despite early disclosure, the vendor has not responded to efforts to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.