exploitDog

CVE-2023-23563

Опубликовано: 22 авг. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database content via SQL Injection.

Ссылки

https://github.com/Orange-Cyberdefense/CVE-repository
Exploit
Third Party Advisory
https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
Exploit
Third Party Advisory
https://www.geomatika.fr/isigeo-web/
Product
https://github.com/Orange-Cyberdefense/CVE-repository
Exploit
Third Party Advisory
https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
Exploit
Third Party Advisory
https://www.geomatika.fr/isigeo-web/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:geomatika:isigeo_web:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00125

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-gv7q-23j8-289m

CVSS3: 6.5

github

больше 2 лет назад

An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database content via SQL Injection.

EPSS

Процентиль: 33%

0.00125

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89