CVE-2023-42236

creationtimestamp| type| source ---|---|--- 2025-01-13 22:08:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1408 2025-01-13 22:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnr73k4k62f...

CVE-2023-42236

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php...

CVE-2023-42236

The CVE-2023-42236 issue affects Selesta Visual Access Manager (VAM) before version 4.42.2. Multiple sources describe an authenticated SQL Injection in the GET parameter of /common/ajaxfunction.php, caused by lack of input validation. Impact is shown as potential exposure of database data due to ...