Skip to content
OpenAdvisories
High · 8.8 CVE-2023-43014 EUVD-2023-47435GHSA-vj64-c4j2-fpvj

Asset Management System v1.0 - Authenticated SQL Injection (SQLi)

Published Sep 28, 2023 · Updated Sep 23, 2024 · Assigned by Fluid Attacks

Description

Asset Management System v1.0 is vulnerable to

an Authenticated SQL Injection vulnerability

on the 'first_name' and 'last_name' parameters

of user.php page, allowing an authenticated

attacker to dump all the contents of the database

contents.

Affected products

VendorProductAffectedFixed
Asset Management System Asset Management System 1.0 —

References