CVE-2023-4867 : faille élevée xintian smart table integrated… (CVSS 8.8)

A vulnerability was found in Xintian Smart Table Integrated Management System 5.6.9. It has been classified as critical. Affected is an unknown function of the file /SysManage/AddUpdateSites.aspx of the component Added Site Page. The manipulation of the argument TbxSiteName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239352.

Sévérité

Élevée (CVSS 8.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

10 sept. 2023

Dernière mise à jour

17 juin 2026

• xintian smart table integrated management system project xintian smart table integrated management system

• Fiche CVE-2023-4867 sur le NVD (NIST)
• github.com/fortunate888/cve/blob/main/sql_inject_1.md
• vuldb.com/
• vuldb.com/