Sql injection

2023-08-0502:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

control id idsecure

unauthenticated attackers

php files

server's root directory

remote code execution

nvd

0.001 Low

EPSS

Percentile

45.1%

JSON

A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server’s root directory, resulting in remote code execution.

CPENameOperatorVersion
control_id_idsecurele4.7.26.0

CPE	Name	Operator	Version
	control_id_idsecure	le	4.7.26.0

References

claroty.com/team82/disclosure-dashboard/cve-2023-33367

www.controlid.com.br/en/access-control/idsecure/

0.001 Low

EPSS

Percentile

45.1%

JSON

Related for PRION:CVE-2023-33367