CVE-2023-4168

A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-200

• http://packetstormsecurity.com/files/174015/Adlisting-Classified-Ads-2.14.0-Information-Disclosure.htmlExploit, Third Party Advisory
• https://vuldb.com/?ctiid.236184Permissions Required, Third Party Advisory
• https://vuldb.com/?id.236184Third Party Advisory
• http://packetstormsecurity.com/files/174015/Adlisting-Classified-Ads-2.14.0-Information-Disclosure.htmlExploit, Third Party Advisory
• https://vuldb.com/?ctiid.236184Permissions Required, Third Party Advisory
• https://vuldb.com/?id.236184Third Party Advisory

Published

Aug 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41674Rejected reason: Not used
• CVE-2023-41675A use after free vulnerability [CWE-416] in FortiOS version …5.3
• CVE-2023-41676An exposure of sensitive information to an unauthorized acto…6.5
• CVE-2023-41677A insufficiently protected credentials in Fortinet FortiProx…8.8
• CVE-2023-41678A double free in Fortinet FortiOS versions 7.0.0 through 7.0…8.8
• CVE-2023-41679An improper access control vulnerability [CWE-284] in FortiM…9.6
• CVE-2023-41680A improper neutralization of input during web page generatio…6.1
• CVE-2023-41681A improper neutralization of input during web page generatio…6.1
• CVE-2023-41682A improper limitation of a pathname to a restricted director…7.5
• CVE-2023-41683Missing Authorization vulnerability in Pechenki TelSender al…5.4
• CVE-2023-41684Cross-Site Request Forgery (CSRF) vulnerability in Felix Wel…8.8
• CVE-2023-41685Improper Neutralization of Special Elements used in an SQL C…9.8