CVE-2023-43013

CVE-2023-43013 affects Asset Management System v1.0. An unauthenticated SQL Injection vulnerability exists in the index.php page via the 'email' parameter, enabling an external attacker to dump all database contents and bypass login controls. Public references in multiple sources corroborate the ...

CVE-2023-43014

CVE-2023-43014 relates to Asset Management System v1.0 with an authenticated SQL Injection in the fields “first_name” and “last_name” on the user.php page. The underlying issue is improper input handling that enables an authenticated attacker to dump the database contents. Documented impact is hi...