Lucene search
MitreCVELIST:CVE-2023-31702HistoryMay 17, 2023 - 12:00 a.m.
CVE-2023-31702
2023-05-1700:00:00
mitre
www.cve.org
cve-2023-31702
sql injection
view user profile
microworld escan management console
database dump
code execution
getusercurrentpwd
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.
Related
cve
cve
CVE-2023-31702
2023-05-17 13:15:09
nvd
nvd
CVE-2023-31702
2023-05-17 13:15:09
zdt
zdt
eScan Management Console 14.0.1400.2281 - SQL Injection Vulnerability
2023-05-23 00:00:00
prion
prion
Sql injection
2023-05-17 13:15:00
packetstorm
packetstorm
eScan Management Console 14.0.1400.2281 SQL Injection
2023-05-24 00:00:00
exploitdb
exploitdb
eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)
2023-05-23 00:00:00