Lucene search
Fluid AttacksCVE-2023-43014HistorySep 28, 2023 - 10:15 p.m.
CVE-2023-43014
2023-09-2822:15:10
CWE-89
Fluid Attacks
web.nvd.nist.gov
35
cve-2023-43014
asset management system
sql injection
user.php
authenticated
database security
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
24.0%
Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the ‘first_name’ and ‘last_name’ parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.
Affected configurations
Node
projectworldsasset_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| projectworlds | asset_management_system | 1.0 | cpe:2.3:a:projectworlds:asset_management_system:1.0:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Asset Management System",
"vendor": "Asset Management System",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
]Related
cvelist
cvelist
prion
prion
Sql injection
2023-09-28 22:15:00
nvd
nvd
CVE-2023-43014
2023-09-28 22:15:10
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
24.0%
Related for CVE-2023-43014