Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-43013 EUVD-2023-47434GHSA-4fv5-wjqm-7f2r

Asset Management System v1.0 - Unauthenticated SQL Injection (SQLi)

Published Sep 28, 2023 · Updated Sep 23, 2024 · Assigned by Fluid Attacks

Vendor: Asset Management System Product: Asset Management System

Description

Asset Management System v1.0 is vulnerable to an

unauthenticated SQL Injection vulnerability on the

'email' parameter of index.php page, allowing an

external attacker to dump all the contents of the

database contents and bypass the login control.

Affected products

VendorProductAffectedFixed
Asset Management System Asset Management System 1.0 —

References