Lucene search
PRIOn knowledge basePRION:CVE-2023-31702HistoryMay 17, 2023 - 1:15 p.m.
Sql injection
2023-05-1713:15:00
PRIOn knowledge base
www.prio-n.com
sql injection
view user profile
microworld
escan management console
remote attacker
database
windows xp
command shell
code execution
getusercurrentpwd
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| escan_management_console | eq | 14.0.1400.2281 |
Related
cve
cve
CVE-2023-31702
2023-05-17 13:15:09
nvd
nvd
CVE-2023-31702
2023-05-17 13:15:09
zdt
zdt
eScan Management Console 14.0.1400.2281 - SQL Injection Vulnerability
2023-05-23 00:00:00
packetstorm
packetstorm
eScan Management Console 14.0.1400.2281 SQL Injection
2023-05-24 00:00:00
cvelist
cvelist
CVE-2023-31702
2023-05-17 00:00:00
exploitdb
exploitdb
eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)
2023-05-23 00:00:00