CVE-2023-6173CWE-89

SQLi in TeoSOFT Software TeoBASE

Critical · published March 27, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

🔥 The TeoBASE software has a critical SQL injection vulnerability that leaves your database open to attack! Think of it as a restaurant where someone can sneak into the kitchen and change the chef's special right before it’s served — and no one checks who’s entering! 🍽️ An attacker could exploit this flaw to manipulate SQL commands, potentially spying on sensitive data, altering records, or even deleting everything without a trace. It’s absolutely devastating if the wrong hands get hold of such power!

Put simply

Think of it as a restaurant where someone can sneak into the kitchen and change the chef's special right before it’s served — and no one checks who’s entering! 🍽️ This vulnerability allows attackers to exploit improper neutralization of special elements in SQL commands, letting them execute arbitrary SQL queries that could compromise the database's integrity.

What to do

An attacker could exploit this flaw to manipulate SQL commands, potentially spying on sensitive data, altering records, or even deleting everything without a trace. It’s absolutely devastating if the wrong hands get hold of such power! To secure your system, patch TeoBASE immediately to the latest version that addresses this vulnerability. Ensure to conduct a security audit on your SQL queries to prevent similar issues. Don't forget to reach out to the vendor for further information if needed! You’ve got this! Take action now and boost your security shield! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00560 · 45.8th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2024-03-27T12:05Z
EPSS history
Timeline
  • 27 MAR 12:05Z
    SQLi in TeoSOFT Software TeoBASE
    cvelistv5