CVE-2023-3751

A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component POST Parameter Handler. The manipulation of the argument products leads to sql injection. The attack can be launched remotely. The identifier VDB-234421 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• https://vuldb.com/?ctiid.234421Permissions Required, Third Party Advisory
• https://vuldb.com/?id.234421Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.234421Permissions Required, Third Party Advisory
• https://vuldb.com/?id.234421Permissions Required, Third Party Advisory

Published

Jul 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37501A Persistent XSS vulnerability can be carried out in a certa…6.1
• CVE-2023-37502HCL Compass is vulnerable to lack of file upload security.  …8.8
• CVE-2023-37503HCL Compass is vulnerable to insecure password requirements.…9.8
• CVE-2023-37504HCL Compass is vulnerable to failure to invalidate sessions.…6.5
• CVE-2023-37507HCL DevOps Plan is susceptible to an information disclosure …7.5
• CVE-2023-37508HCL DevOps Plan is potentially susceptible to Cross-Site Scr…6.1
• CVE-2023-37511If certain App Transport Security (ATS) settings are set in …4.3
• CVE-2023-37512When the app is put to the background and the user goes to t…5.5
• CVE-2023-37513When the app is put to the background and the user goes to t…5.5
• CVE-2023-37516Missing "no cache" headers in HCL Leap permits user director…3.2
• CVE-2023-37517Missing "no cache" headers in HCL Leap permits sensitive dat…7.5
• CVE-2023-37518HCL BigFix ServiceNow is vulnerable to arbitrary code inject…8.8