TI-2023-20563 Aliases CVE-2023-39424 GHSA-28pf-jj6h-h694

Injection in Resort Data Processing, Inc. IRM Next Generation

MEDIUM 45CWE-74Published 2023-09-07 · Updated 2024-09-26

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-434.

Summary

A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web shell component) to the SQL database and execute it with SYSTEM privileges. This vulnerability requires authentication to be exploited but can be paired with another vulnerability in the platform (CVE-2023-39420, which grants access to hardcoded credentials) to carry the attack without having assigned credentials.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00987 62nd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Resort Data Processing, Inc.	IRM Next Generation	1.0.0.0	—	No fix listed	CNA

IRM Next Generation VendorResort Data Processing, Inc. Affected 1.0.0.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:resortdata:internet_reservation_module_next_generation:5.3.2.15:::::::*	5.3.2.15	Vulnerable	Resort Data Processing, Inc.

cpe:2.3:a:resortdata:internet_reservation_module_next_generation:5.3.2.15:*:*:*:*:*:*:* Versions 5.3.2.15 Vulnerable ·Resort Data Processing, Inc.

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-39424
2026-10-03 Alias added: GHSA-28pf-jj6h-h694

References

Advisory 1

https://bitdefender.com/blog/labs/check-out-with-extra-charges-vulnerabilities-in-hotel-booking-engine-explained

TI-2023-20561 Use of Hard-coded Credentials in multiple /irmdata/api/ endpoints CVSS 3.1CRITICAL 9.8
TI-2023-20562 Improper Neutralization of Special Elements used in an SQL Command in RDPData.dll CVSS 3.1CRITICAL 9.1
TI-2023-20559 Use of Hard-coded Credentials in RDPCore.dll CVSS 3.1CRITICAL 9.9
TI-2023-20560 Use of Hard-coded Credentials in RDPWin.dll CVSS 3.1HIGH 7.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences