CVE-2023-23459

Summary: CVE-2023-23459 concerns the Priority Windows web application from Priority Window Glass, Inc. described as allowing command execution via SQL injection using an unspecified method. The CNNVD entry notes affected versions are prior to 22.1. The vulnerability’s root cause is an SQL injecti...

CVE-2023-23460

Priority Web version 19.1.0.68 is affected by a vulnerability described as parameter manipulation on an unspecified endpoint that may lead to authentication bypass. The CVSS v3.1 base score is 9.8 (CRITICAL), with network attack vector, low attack complexity, and privileges required: NONE. The im...