Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-43014

Asset Management System v1.0 - Authenticated SQL Injection (SQLi)

Description

Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page, allowing an authenticated attacker to dump all the contents of the database contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Asset Management System Asset Management System

Default version status: unaffected

  • 1.0affected

References