CVE-2023-43014
Severity CVSS v4.0:
Pending analysis
Type:
CWE-89
SQL Injection
Publication date:
28/09/2023
Last modified:
29/09/2023
Description
Asset Management System v1.0 is vulnerable to<br />
<br />
an Authenticated SQL Injection vulnerability<br />
<br />
on the &#39;first_name&#39; and &#39;last_name&#39; parameters<br />
<br />
of user.php page, allowing an authenticated<br />
<br />
attacker to dump all the contents of the database<br />
<br />
contents.<br />
<br />
<br />
<br />
Impact
Base Score 3.x
8.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:projectworlds:asset_management_system:1.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page