Description
A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1) and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222728.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | lmxcms | affected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-23580 | A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1) and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222728. |
References
| Link | Providers |
|---|---|
| https://vuldb.com/?ctiid.222728 |
|
| https://vuldb.com/?id.222728 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-02T05:41:00.068Z
Reserved: 2023-03-10T15:44:14.837Z
Link: CVE-2023-1322
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-03-10T16:15:11.173
Modified: 2024-11-21T07:38:55.277
Link: CVE-2023-1322
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses