CyberRota Analysis
AI-GeneratedWebkul QloApps is vulnerable due to improper validation of request parameters, allowing remote, authenticated attackers with administrative privileges to execute arbitrary SQL queries via the 'bo_query' parameter in the 'Address.php' file. This flaw could lead to unauthorized data manipulation or exposure, posing a significant risk to the integrity of the database. Organizations using QloApps should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'bo_query' parameter in the 'Address.php' file. Fixed in 123c97c.