Lucene search
MitreCVE-2023-34635HistoryJul 31, 2023 - 2:15 p.m.
CVE-2023-34635
2023-07-3114:15:10
CWE-89
mitre
web.nvd.nist.gov
24
cve-2023-34635
wifi soft
unibox administration
sql injection
nvd
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.002
Percentile
57.8%
Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.
Affected configurations
Node
wifi-softunibox_administrationMatch3.0
ORwifi-softunibox_administrationMatch3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wifi-soft | unibox_administration | 3.0 | cpe:2.3:a:wifi-soft:unibox_administration:3.0:*:*:*:*:*:*:* |
| wifi-soft | unibox_administration | 3.1 | cpe:2.3:a:wifi-soft:unibox_administration:3.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-34635
2023-07-31 00:00:00
nvd
nvd
CVE-2023-34635
2023-07-31 14:15:10
prion
prion
Sql injection
2023-07-31 14:15:00
zdt
zdt
Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection Vulnerability
2023-07-21 00:00:00
exploitdb
exploitdb
Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection
2023-07-20 00:00:00
packetstorm
packetstorm
Wifi Soft Unibox Administration 3.0 / 3.1 SQL Injection
2023-07-21 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.002
Percentile
57.8%
Related for CVE-2023-34635