CVE-2023-3307

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/show_bookings/. The manipulation of the argument search_query leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231803. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jun 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-330705.5Transient DOS in Automotive OS due to improper authentication to the secure IO calls.CVE-2023-330717.8Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.CVE-2023-330727.8Memory corruption in Core while processing control functions.CVE-2023-330747.8Memory corruption in Audio when SSR event is triggered after music playback is stopped.CVE-2023-330767.8Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.CVE-2023-330777.8Memory corruption in HLOS while converting from authorization token to HIDL vector.CVE-2023-330785.5Information Disclosure while processing IOCTL request in FastRPC.CVE-2023-330797.8Memory corruption in Audio while running invalid audio recording from ADSP.CVE-2023-33088.8A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator CVE-2023-330807.5Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.CVE-2023-330817.5Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.CVE-2023-330829.8Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.