CVE-2023-4849 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-4849 PUBLISHED CVSS 6.300000190734863 MEDIUM

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239258 is the identifier assigned to this vulnerability.

EPSS 0.05% · 16.4th percentile

Risk Scores

CVSS v3.1

6.300000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS Score

0.05%

16.4th percentile

Affected Products

Vendor	Product	Versions
ibos	ibos	4.5.5
ibos	ibos	4.5.5
IBOS	OA	4.5.5

Timeline

Sep 9, 2023 CVE Published
Sep 10, 2023 EPSS Score
Oct 12, 2023 EPSS Score
Nov 13, 2023 EPSS Score
Dec 15, 2023 EPSS Score
Jan 16, 2024 EPSS Score
Feb 17, 2024 EPSS Score
Mar 20, 2024 EPSS Score
Apr 21, 2024 EPSS Score
May 22, 2024 EPSS Score
Jun 23, 2024 EPSS Score
Jul 25, 2024 EPSS Score

References

https://vuldb.com/?id.239258 vdb
https://vuldb.com/?ctiid.239258 url
https://github.com/TinkAnet/cve/blob/main/sql.md exploit
https://nvd.nist.gov/vuln/detail/CVE-2023-4849 advisory

Open in Interactive Console →