Lucene search
Fluid AttacksCVELIST:CVE-2023-43014HistorySep 28, 2023 - 9:04 p.m.
CVE-2023-43014 Asset Management System v1.0 - Authenticated SQL Injection (SQLi)
2023-09-2821:04:11
CWE-89
Fluid Attacks
www.cve.org
3
cve-2023-43014
authenticated
sql injection
asset management system
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.001
Percentile
24.0%
Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the ‘first_name’ and ‘last_name’ parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Asset Management System",
"vendor": "Asset Management System",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
]Related
prion
prion
Sql injection
2023-09-28 22:15:00
nvd
nvd
CVE-2023-43014
2023-09-28 22:15:10
cve
cve
CVE-2023-43014
2023-09-28 22:15:10
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.001
Percentile
24.0%
Related for CVELIST:CVE-2023-43014