ArmorX Global Technology Corporation ArmorX Spam - SQL Injectoin
CVE-2023-48384

9.8CRITICAL

Key Information:

Vendor: ArmorX Global Technology Corporation
Status: ArmorX Spam
Vendor: CVE Published:; 15 December 2023

🔔 Create ArmorX Global Technology Corporation Vulnerability Alert

What is CVE-2023-48384?

ArmorX Spam, developed by ArmorX Global Technology Corporation, has a critical vulnerability due to inadequate validation of user input in specific functions. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands, compromising the integrity of the database. Exploited successfully, this vulnerability can lead to unauthorized access, data modification, or even deletion of sensitive information, emphasizing the need for stringent input validation mechanisms.

Affected Version(s)

ArmorX Spam 8.15.2-2.872.088-1.90.027

References

https://www.twcert.org.tw/tw/cp-132-7601-71c94-1.html

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 15, 2023
Vulnerability Reserved
Nov 16, 2023

CVE-2023-48384 Data

JSON