Vulnerability CVE-2023-48395


Published: 2023-12-15

Description:
Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database.

 References:
https://www.twcert.org.tw/tw/cp-132-7625-a0b9c-1.html

Copyright 2026, cxsecurity.com

 

Back to Top