| |
Vulnerability CVE-2023-35851
Published: 2023-09-18 Modified: 2023-09-19
| Description: |
SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.
|
Type:
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
References: |
https://www.twcert.org.tw/tw/cp-132-7372-3994a-1.html
|
|
|
Copyright 2023, cxsecurity.com
|
|
|
