Lucene search

K
cveMitreCVE-2023-22630
HistoryJan 23, 2023 - 10:15 p.m.

CVE-2023-22630

2023-01-2322:15:11
CWE-89
mitre
web.nvd.nist.gov
58
cve-2023-22630
izybat orange
sql injection
getcasier.php
uri

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

25.5%

IzyBat Orange casiers before 20221102_1 allows SQL Injection via a getCasier.php?taille= URI.

Affected configurations

Nvd
Node
izybatorange_casiersRange<20221102_1
VendorProductVersionCPE
izybatorange_casiers*cpe:2.3:a:izybat:orange_casiers:*:*:*:*:*:*:*:*

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

25.5%

Related for CVE-2023-22630