CVE-2023-5258

Name of the Vulnerable Software and Affected Versions OpenRapid RapidCMS version 1.3.1

Description A critical vulnerability has been found in OpenRapid RapidCMS. This issue affects an unknown part of the file /resource/addgood.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely.

Recommendations For OpenRapid RapidCMS version 1.3.1, consider disabling access to the /resource/addgood.php file until a patch is available. Restrict the manipulation of the id argument to minimize the risk of sql injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.