CVE-2023-43739

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The 'bookisbn' parameter of the cart.php resource

does not validate the characters received and they

are sent unfiltered to the database.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-43744.3The WP Remote Users Sync plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability CVE-2023-437408.8Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_edit.php page, allowCVE-2023-437417.0A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildCVE-2023-437429.8An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 anCVE-2023-437438.8A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 171CVE-2023-437447.2An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 pCVE-2023-437452.8Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an authenticated user to potentially enable denial ofCVE-2023-437468.7When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utiCVE-2023-437476.7Incorrect default permissions for some Intel(R) Connectivity Performance Suite software installers before version 2.0 may allow an authenticCVE-2023-437487.8Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authenticated user to potentiaCVE-2023-437516.7Uncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R) Graphics Windows DCH driver software before veCVE-2023-437528.0OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earl
CVE-2023-43739: Critical severity, CVSS 9.8 | Vulnix