Vulnerability Details CVE-2023-43014
Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the 'first_name' and 'last_name' parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.9%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2023-43014
-
cpe:2.3:a:projectworlds:asset_management_system:1.0