CVE-2023-26813: SQL Injection
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-26813?
CVE-2023-26813 has a medium severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2023-26813?
To fix CVE-2023-26813, ensure proper input validation and parameterized queries for the TableName parameter in the affected code.
What systems are affected by CVE-2023-26813?
CVE-2023-26813 affects Wangmarket CMS version 4.10.
Can CVE-2023-26813 lead to data compromise?
Yes, CVE-2023-26813 allows remote attackers to execute arbitrary SQL commands, potentially leading to data disclosure or corruption.
Is CVE-2023-26813 easy to exploit?
Yes, CVE-2023-26813 can be exploited with minimal technical knowledge using specially crafted requests.