CVE-2023-43014

Publication date

2023-09-28 21:04:11

Family

Fluid Attacks

State

PUBLISHED

Description

Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the first_name and last_name parameters of user.php page, allowing an authenticated attacker to dump all the contents of the database contents.