Vulnerability Details CVE-2023-26784
SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.2%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-26784
-
cpe:2.3:a:tosec:kirin_fortress_machine:1.7-2020-0610