CVE-2023-33366

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands...

CVE-2023-33366

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands...

CVE-2023-33366

Summary: CVE-2023-33366 is a SQL injection vulnerability in Suprema BioStar 2 prior to 2.9.1. Authenticated users can inject arbitrary SQL into statements and execute commands. The issue has a high impact (CVSS 3.1 base score 8.8) affecting the BioStar 2 web/DB interaction. Affected version(s) : ...