CVE-2023-34635

Опубликовано: 31 июл. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.

Ссылки

http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/51610
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/51610
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wifi-soft:unibox_administration:3.0:*:*:*:*:*:*:*

cpe:2.3:a:wifi-soft:unibox_administration:3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00152

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-5gqg-5mrw-vp9f