CVE-2023-43014 — Asset Management System v1.0 - Authenticated SQL Injection (SQLi)
Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page, allowing an authen…
Published: 2023-09-28 · CVSS: 8.8 · CVSS 3.1
Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page, allowing an authenticated attacker to dump all the contents of the database contents.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7