Cpe:2.3:a:qualitor:qualitor:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aqualitorqualitor/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 09:57:28 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgQualitor: Unauthenticated Remote Code Execution (CVE-2023-47253)https://feed.craftedsignal.io/briefs/2026-10-qualitor-rce/Wed, 28 Oct 2026 09:57:28 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-qualitor-rce/Qualitor versions 8.20 and earlier are vulnerable to unauthenticated remote code execution via PHP code injection into the gridValoresPopHidden parameter, with public proof-of-concept exploits available.Qualitor software (version 8.20 and earlier) contains a critical remote code execution (RCE) vulnerability identified as CVE-2023-47253. The vulnerability exists in the script '/html/ad/adpesquisasql/request/processVariavel.php', which passes user-controlled input from the 'gridValoresPopHidden' HTTP request parameter directly into a PHP eval() function. This allows an unauthenticated remote attacker to execute arbitrary PHP code on the underlying server.

Impact

Successful exploitation allows an unauthenticated attacker to execute arbitrary system commands, leading to full system compromise, data theft, and loss of integrity and availability.

Recommendation

  • Update all Qualitor instances to a version later than 8.20 immediately.
  • Review web server access logs for requests containing the 'gridValoresPopHidden' parameter targeting the '/html/ad/adpesquisasql/request/processVariavel.php' file.
  • Inspect server filesystem for evidence of webshells or unauthorized modifications, particularly in the directory containing the vulnerable script.
]]>criticaladvisorywebserverrcephpcve-2023-47253