lmxcms BookAction.class.php reply sql injection
CVE-2023-1322

9.8CRITICAL

Key Information:

Vendor

Lmxcms

Status
lmxcms
Vendor
CVE Published:
10 March 2023

What is CVE-2023-1322?

A SQL injection vulnerability exists in LmxCMS version 1.41, specifically in the 'reply' function within the BookAction.class.php file. This flaw allows an attacker to manipulate the 'id' parameter with crafted input, such as '1) and updatexml(0,concat(0x7e,user()),1)#', which can lead to unauthorized access to the database. Given the nature of this vulnerability, it can be exploited remotely, emphasizing the need for immediate attention and patching to secure affected installations.

Affected Version(s)

lmxcms 1.41

References

https://vuldb.com/?id.222728
vdb-entrytechnical-description
https://vuldb.com/?ctiid.222728
signature

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

p1nk (VulDB User)
.
CVE-2023-1322 : lmxcms BookAction.class.php reply sql injection