CVE-2023-3791

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. Affected by this issue is the function actionExport of the file ?r=contact/default/export of the component Personal Office Address Book. The manipulation leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2023-3791 IBOS OA Personal Office Address Book export actionExport sql injection

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. Affected by this issue is the function actionExport of the file ?r=contact/default/export of the component Personal Office Address Book. The manipulation leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2023-3791

IBOS OA 4.5.5 has a SQL injection in the Personal Office Address Book, via the function actionExport in the file path ?r=contact/default/export. The vulnerability (CVE-2023-3791) can be triggered remotely and has been publicly disclosed. Affected component, root cause, and explicit impact details...