CVE-2023-1634

A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224016.

• CWE-918
• CWE-918

• https://github.com/BigTiger2020/2023-1/blob/main/ssrf/ssrf.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.224016Third Party Advisory
• https://vuldb.com/?id.224016Third Party Advisory
• https://github.com/BigTiger2020/2023-1/blob/main/ssrf/ssrf.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.224016Third Party Advisory
• https://vuldb.com/?id.224016Third Party Advisory

Published

Mar 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1628A vulnerability classified as problematic has been found in …5.5
• CVE-2023-1629A vulnerability classified as critical was found in JiangMin…7.8
• CVE-2023-1630A vulnerability, which was classified as problematic, has be…5.5
• CVE-2023-1631A vulnerability, which was classified as problematic, was fo…5.5
• CVE-2023-1632Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2023-1633A credentials leak flaw was found in OpenStack Barbican. Thi…5.5
• CVE-2023-1635A vulnerability was found in OTCMS 6.72. It has been declare…6.1
• CVE-2023-1636A vulnerability was found in OpenStack Barbican containers. …5
• CVE-2023-1637A flaw that boot CPU could be vulnerable for the speculative…5.5
• CVE-2023-1638A vulnerability was found in IObit Malware Fighter 9.4.0.776…5.5
• CVE-2023-1639A vulnerability classified as problematic has been found in …5.5
• CVE-2023-1640A vulnerability classified as problematic was found in IObit…5.5