CVE-2023-42236

creationtimestamp| type| source ---|---|--- 2025-01-13 22:08:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1408 2025-01-13 22:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnr73k4k62f...

CVE-2023-42236

An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . The root cause is a lack of validation of the GET parameter in the /common/ajaxfunction.php endpoint against externally entered SQL statements. An authenticated attacker can exploit this flaw t...

CVE-2023-42236

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php...