CVE-2023-43014 — Asset Management System v1.0 - Authenticated SQL Injection (SQLi)

CVE-2023-43014

Asset Management System v1.0 - Authenticated SQL Injection (SQLi) PUBLISHED

Description (CNA)

Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page, allowing an authenticated attacker to dump all the contents of the database contents.

Affected (CNA)

Vendor / product	Versions
Asset Management System / Asset Management System	affected 1.0

CWE

CWE-89

References

https://fluidattacks.com/advisories/gaahl
https://projectworlds.in/

ADP enrichment

CVE

No English description supplied.

https://fluidattacks.com/advisories/gaahl
https://projectworlds.in/

CISA-ADP

No English description supplied.

No references supplied.