CVE-2023-3478

A vulnerability classified as critical was found in IBOS OA 4.5.5. Affected by this vulnerability is the function actionEdit of the file ?r=dashboard/roleadmin/edit=member of the component Add User Handler. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2023-3478

CVE-2023-3478 affects IBOS OA 4.5.5. Concrete detail: the Add User Handler’s component Add User Handler exposes the function actionEdit at ?r=dashboard/roleadmin/edit&op=member, where manipulating the id parameter leads to SQL injection. The vulnerability can be exploited remotely and the exploit...