Lucene search

K

CVE-2023-5020

🗓️ 17 Sep 2023 05:10:15Reported by VulDBType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views

A critical vulnerability in 07FLY CRM V2 allows remote attackers to execute SQL injection via the argument account in /index.php/sysmanage/Login/login_auth/. Publicly disclosed with ID VDB-239861

Show more
Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Cvelist
CVE-2023-5020 07FLY CRM Administrator Login Page sql injection
17 Sep 202304:31
cvelist
Prion
Sql injection
17 Sep 202305:15
prion
NVD
CVE-2023-5020
17 Sep 202305:15
nvd
[
  {
    "vendor": "07FLY",
    "product": "CRM",
    "versions": [
      {
        "version": "V2",
        "status": "affected"
      }
    ],
    "modules": [
      "Administrator Login Page"
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
17 Sep 2023 05:15Current
8.9High risk
Vulners AI Score8.9
CVSS27.5
CVSS37.3 - 9.8
EPSS0.001
48
.json
Report