Security Advisory

CVE-2023-43014

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-28 21:04:11
Last updated 2024-09-23 18:48:41
Assigner Fluid Attacks
State PUBLISHED

Description

Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the first_name and last_name parameters of user.php page, allowing an authenticated attacker to dump all the contents of the database contents.