CVE-2023-3751

Name of the Vulnerable Software and Affected Versions Super Store Finder version 3.6

Description A critical issue was found in the file /index.php of the component POST Parameter Handler, where the manipulation of the products argument leads to sql injection. This issue can be exploited remotely. The vendor was contacted about this disclosure but did not respond.

Recommendations For Super Store Finder version 3.6, consider restricting access to the /index.php file or disabling the POST Parameter Handler component until a fix is available. As a temporary workaround, avoid using the products argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.