CVE-2023-44025

Publication date

2023-11-01 00:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component.