PT-2023-24315 · Control Id · Idsecure
CVE-2023-33367
·
Publicado
2023-08-05
·
Atualizado
2023-08-09
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Control ID IDSecure versions 4.7.26.0 and prior
Description
A SQL injection issue exists, allowing unauthenticated attackers to write PHP files on the server's root directory, resulting in remote code execution.
Recommendations
For versions 4.7.26.0 and prior, update to a version that contains a fix for this issue to prevent remote code execution.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Idsecure