{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2023-47253/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:qualitor:qualitor:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2023-47253"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Qualitor (\u003c= 8.20)"],"_cs_severities":["critical"],"_cs_tags":["webserver","rce","php","cve-2023-47253"],"_cs_type":"advisory","_cs_vendors":["Qualitor"],"content_html":"\u003cp\u003eQualitor software (version 8.20 and earlier) contains a critical remote code execution (RCE) vulnerability identified as CVE-2023-47253. The vulnerability exists in the script '/html/ad/adpesquisasql/request/processVariavel.php', which passes user-controlled input from the 'gridValoresPopHidden' HTTP request parameter directly into a PHP eval() function. This allows an unauthenticated remote attacker to execute arbitrary PHP code on the underlying server.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated attacker to execute arbitrary system commands, leading to full system compromise, data theft, and loss of integrity and availability.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate all Qualitor instances to a version later than 8.20 immediately.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for requests containing the 'gridValoresPopHidden' parameter targeting the '/html/ad/adpesquisasql/request/processVariavel.php' file.\u003c/li\u003e\n\u003cli\u003eInspect server filesystem for evidence of webshells or unauthorized modifications, particularly in the directory containing the vulnerable script.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T09:57:28Z","date_published":"2026-10-28T09:57:28Z","id":"https://feed.craftedsignal.io/briefs/2026-10-qualitor-rce/","summary":"Qualitor versions 8.20 and earlier are vulnerable to unauthenticated remote code execution via PHP code injection into the gridValoresPopHidden parameter, with public proof-of-concept exploits available.","title":"Qualitor: Unauthenticated Remote Code Execution (CVE-2023-47253)","url":"https://feed.craftedsignal.io/briefs/2026-10-qualitor-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2023-47253","version":"https://jsonfeed.org/version/1.1"}