CVE-2023-43373

What it actually does

Unauthenticated SQL injection via the n_utente_agg parameter at /hoteldruid/interconnessioni.php permits arbitrary query execution against the backend database.

Why it matters to the business

Attackers can extract, modify, or delete sensitive operational and customer data with rising exploit likelihood and weaponized public code available.

How an attack unfolds

An attacker sends a crafted HTTP request containing SQL metacharacters in the n_utente_agg parameter to interconnessioni.php; the unsanitized input is concatenated into a query that executes attacker-controlled statements, enabling data exfiltration or further system access.

How to fix it

Upgrade affected packages to the listed fixed versions: thunderbird (Debian:11) to 1:115.7.0-1~deb11u1, thunderbird (Debian:12) to 1:115.7.0-1~deb12u1, thunderbird (Debian:13) to 1:115.7.0-1, firefox-esr (Debian:11) to 115.7.0esr-1~deb11u1, firefox-esr (Debian:12) to 115.7.0esr-1~deb12u1, firefox-esr (Debian:13) to 115.7.0esr-1. Apply vendor patches immediately given weaponized exploit maturity.

How to confirm the fix worked

Confirm the application version is no longer 3.0.5, test the endpoint with benign input to ensure no SQL error leakage, and review application logs for prior anomalous queries containing n_utente_agg.

Typical attack path

1. Locate publicly reachable Hoteldruid instance
2. Submit SQL injection payload in n_utente_agg parameter
3. Verify successful query execution via error responses or timing
4. Extract schema, credentials, or sensitive records
5. Pivot to additional compromise using obtained data

How to detect it

Inspect web server access logs for requests to interconnessioni.php containing SQL keywords or unusual characters in n_utente_agg; correlate with database query logs showing unexpected statements or errors.

• /hoteldruid/interconnessioni.php
• n_utente_agg=
• SQL syntax error
• interconnessioni.php?n_utente_agg=

What your security team should do

• Apply the exact fixed package versions listed for each Debian release immediately
• Block or restrict external access to /hoteldruid/interconnessioni.php until patched
• Enable web application firewall rules to detect SQL metacharacters in the parameter
• Monitor EPSS trend and exploit availability for prioritization