CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/23 5:12 a.m.•19 views

CVE-2023-23634

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint...

9.8CVSS8.9AI score0.01094EPSS

SaveExploits1References1

NVD•added 2023/12/29 7:15 a.m.•25 views

CVE-2023-23634

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint...

9.8CVSS0.01094EPSS

SaveExploits1References1

OSV•added 2023/12/29 12:00 a.m.•22 views

CVE-2023-23634

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint...

8.9AI score

SaveExploits0References3

CVE•added 2023/12/29 12:00 a.m.•96 views

CVE-2023-23634

CVE-2023-23634 affects Documize 5.4.2. A SQL injection vulnerability in the /api/dashboard/activity endpoint allows remote attackers to execute arbitrary code via the user parameter, with high impact (C, I, A all High) and CVSS 3.1 score 9.8. Affected component: the /api/dashboard/activity reques...

9.8CVSS9.9AI score0.01094EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by