3 matches found
CVE-2023-43192
SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statemen...
CVE-2023-43192
SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statemen...
CVE-2023-43192
The CVE-2023-43192 entry concerns SpringbootCMS 1.0, where a SQL injection vulnerability exists in a newly created background component. User-supplied parameters are not filtered, allowing special characters to alter SQL logic and potentially enable attackers to execute arbitrary SQL statements. ...