CVE-2023-33179

Vulnerability: CVE-2023-33179 affects Xibo CMS. An SQL injection in the nameFilter function exists in versions 3.2.0 through 3.3.4 (prior to 3.3.5) that enables an authenticated user to exfiltrate data from the Xibo database. Impact: Authenticated data exposure due to improper input handling in t...

CVE-2023-33179 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilter

Xibo is a content management system CMS. An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.5 in the nameFilter function used throughout the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafte...