Security Advisory

CVE-2023-41443

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-18 00:00:00
Last updated 2024-09-25 17:26:14
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list.