Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-28701 EUVD-2023-32344GHSA-7x3g-82vf-2phf

ELITE Web Fax - SQL Injection

Published Jun 2, 2023 · Updated Jan 8, 2025 · Assigned by twcert

Description

ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service.

Affected products

VendorProductAffectedFixed
ELITE Web Fax — —

References