CVE-2023-46821

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Security Headers allows auth. (admin+) SQL Injection.This issue affects GD Security Headers: from n/a through 1.7.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Nov 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-468226.1Unauth. Reflected Cross-Site Scripting') vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, ExporCVE-2023-468237.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum ImageLinks Interactive Image BCVE-2023-468244.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin <= 1.7.14 CVE-2023-46835.5NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.CVE-2023-468355.5The current setup of the quarantine page tables assumes that the quarantine domain (dom_io) has been initialized with an address width of DECVE-2023-468364.7The fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative Return Stack Overflow) are not IRQ-safe. It was believed that the miCVE-2023-468373.3Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory CVE-2023-468387.5Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part anyCVE-2023-468395.3PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDsCVE-2023-468404.1Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guestsCVE-2023-468416.5Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET). A sub-feature of this are Shadow Stacks (CET-SS). CET-CVE-2023-468426.5Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers