Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-48384 EUVD-2023-52436GHSA-ccvf-77q3-xjv9

ArmorX Global Technology Corporation ArmorX Spam - SQL Injectoin

Published Dec 15, 2023 · Updated Aug 2, 2024 · Assigned by twcert

Description

ArmorX Global Technology Corporation ArmorX Spam has insufficient validation for user input within a special function. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.

Affected products

VendorProductAffectedFixed
ArmorX Global Technology ArmorX Spam 8.15.2-2.872.088-1.90.027 —

References