Sql injection

2023-07-2100:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

critical

ibos oa

function actionedit

file editing

mobile notification handler

sql injection

exploit

public disclosure

vdb-235069

vendor notification

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. Affected by this vulnerability is the function actionEdit of the file ?r=officialdoc/officialdoc/edit of the component Mobile Notification Handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-235069 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.