CVE-2023-39807

CVE-2023-39807 affects N.V.K. INTER CO., LTD. iBSG v3.5. The vulnerability is a SQL injection via the a_passwd parameter in the /portal/user-register.php endpoint, enabling potential unauthorized data access or manipulation. The CVSS v3.1 metrics indicate a high-severity, network-exposed issue wi...

CVE-2023-39809

CVE-2023-39809 affects NVK iBSG v3.5, with a command injection vulnerability through the system_hostname parameter at /manage/network-basic.php. The CVSS 3.1 vector shows high impact (C/H/I/A) and network access with no privileges required, no user interaction, and unchanged scope. The available ...