CVE-2023-31719

CVE-2023-31719 Its possible do inject SQL code into the JSON parameter "username" from the endpoint /api/signin via HTTP POST request "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" Name Affected product: FUXA Version affected: = 1.1....

FUXA SQL Injection vulnerability

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-31719

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-31719: Improper Neutralization of Special Elements used in an SQL Command

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-31719

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-31719

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

PT-2023-23432

Name of the Vulnerable Software and Affected Versions FUXA versions 1.1.12 and earlier Description The issue is related to SQL Injection via the "/api/signin" API endpoint. This allows for potential exploitation. No information is provided about the estimated number of potentially affected device...