Skip to content
OpenAdvisories
Critical · 9.4 CVE-2023-6097 EUVD-2023-58353GHSA-pcjw-gcgw-57f6

SQL Injection on ICSSolution ICS Business Manager

Published Nov 13, 2023 · Updated Sep 3, 2024 · Assigned by INCIBE

Description

A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a specially crafted SQL query and retrieve all the information stored in the database. The data could also be modified or deleted, causing the application to malfunction.

Affected products

VendorProductAffectedFixed
ICSSolution ICS Business Manager 7.06.0028.7089, 7.06.0028.7066, 7.06.0028.2802 —

References