VDB
CVE-2023-4851
CVE-2023-4851
PUBLISHED
CVSS 6.5 MEDIUM
A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239260.
EPSS 0.74% · 53.0th percentile
Risk Scores
CVSS 2.0
6.5
EPSS Score
0.74%
53.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBOS | OA | 4.5.5, 4.5.5 |
| ibos | ibos | 4.5.5, 4.5.5 |
Timeline
- Sep 9, 2023 CVE Published
- Sep 9, 2023 PoC Published
- Sep 10, 2023 EPSS Score
- Sep 11, 2023 PoC Published
- Oct 13, 2023 EPSS Score
- Nov 15, 2023 EPSS Score
- Dec 18, 2023 EPSS Score
- Jan 21, 2024 EPSS Score
- Feb 23, 2024 EPSS Score
- Mar 27, 2024 EPSS Score
- Apr 29, 2024 EPSS Score
- Jun 1, 2024 EPSS Score