CVE-2023-43192

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered

published September 27, 2023

CVSS
—
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00894 · 59.1th percentile
Published
2023-09-27T00:00Z
EPSS history
Timeline
  • 27 SEP 00:00Z
    SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered
    cvelistv5