{"vulnerability": "CVE-2023-2704", "sightings": [{"uuid": "f129079b-6f84-4795-9cf8-67449f7203a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27043", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:41.799166Z"}, {"uuid": "43a90343-73bd-4430-be24-c5ed8d845c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27043", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b2dbb4a7b51d52b80e3077bbbc80f66d", "content": "", "creation_timestamp": "2025-09-29T13:20:41.000000Z"}, {"uuid": "31ef7465-5ba3-4a90-aa8f-c1f80be9dfb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27043", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "b3a99eb9-c37d-4327-b37c-d47eb463cf81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27041", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5599", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27041\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_user.php.\n\ud83d\udccf Published: 2023-03-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T20:02:56.074Z\n\ud83d\udd17 References:\n1. https://github.com/forsean/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md", "creation_timestamp": "2025-02-26T20:24:54.000000Z"}, {"uuid": "25a399a6-8cdb-4e2e-9f32-52f2bf136e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27040", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5598", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27040\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.\n\ud83d\udccf Published: 2023-03-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T20:04:10.612Z\n\ud83d\udd17 References:\n1. https://www.exploit-db.com/exploits/50214", "creation_timestamp": "2025-02-26T20:24:53.000000Z"}, {"uuid": "1758e121-d1f0-4b70-8adf-8a0f8070346a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27043", "type": "seen", "source": "https://t.me/arpsyndicate/1603", "content": "#ExploitObserverAlert\n\nCVE-2023-27043\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-27043. The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\nFIRST-EPSS: 0.000510000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2023-12-10T11:14:45.000000Z"}, {"uuid": "07bdc02f-7637-4edb-9002-8a642acb236f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-2704", "type": "seen", "source": "https://t.me/cibsecurity/64449", "content": "\u203c CVE-2023-2704 \u203c\n\nThe BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T07:32:45.000000Z"}, {"uuid": "91fe2a61-4f59-4135-8e1b-8a96f5e2b5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27040", "type": "seen", "source": "https://t.me/cibsecurity/60171", "content": "\u203c CVE-2023-27040 \u203c\n\nSimple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T19:30:53.000000Z"}, {"uuid": "e025014a-8e53-413f-88b0-3b2b95a27caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27041", "type": "seen", "source": "https://t.me/cibsecurity/60164", "content": "\u203c CVE-2023-27041 \u203c\n\nSchool Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_user.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T19:30:46.000000Z"}, {"uuid": "6b4851c6-831a-4f9a-93f1-711fbc060e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-27043", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}]}