CVE-2023-7039CWE-74

Byzoro S210 importexport.php injection

Medium · published December 21, 2023

CVSS v3.1

6.3

EPSS

14%

Percentile

96.6

In the wild

Unconfirmed

What it is

A vulnerability classified as critical has been found in Byzoro S210 up to 20231210. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248688.

The record

Technical detail

CVSS v3.1: 6.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0: Not supplied
EPSS: 0.14225 · 96.6th percentile
Weakness: CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published: 2023-12-21T18:31Z

EPSS history

Timeline

21 DEC 18:31Z
Byzoro S210 importexport.php injection
cvelistv5