Beveiligingsadvies

CVE-2023-45503

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-15 00:00:00

Laatst bijgewerkt 2024-08-02 20:21:16

Toegewezen door mitre

CVSS-score 5.3

Status PUBLISHED

Beschrijving

SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via crafted payload to resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole, deleteComment, deleteUser, allowComment, saveRole, forgotPasswordProcess, resetPassword, saveUser, addComment, saveRole, and saveUser endpoints.

← Alle CVE's bekijken Bekijk op cve.org ↗