Log in Start free

Vulnerability · Published Oct 27, 2023 · Assigned by VulDB

CVE-2023-5828Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx sql injection

High 7.3

In plain English

A high-severity SQL injection in Longxing Industrial Development Zone Project Construction and Installation Management System from Nanning Ontall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.8%top 42.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the argument tbxUserName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243727.

Affected products (as reported)

VendorProductVersions
Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System 20231026

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References