CVE-2023-39805: SQL Injection

Published Aug 10, 2023

Updated

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.

Affected Software

1 affected component

idreamsoft iCMS=7.0.16

Event History

Aug 10, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-39805?

CVE-2023-39805 is a SQL injection vulnerability in iCMS v7.0.16.

How severe is CVE-2023-39805?

CVE-2023-39805 has a severity rating of 9.8, which is considered critical.

How does CVE-2023-39805 affect iCMS?

CVE-2023-39805 affects iCMS v7.0.16 and allows SQL injection via the 'where' parameter in admincp.php.

How can I fix CVE-2023-39805?

To fix CVE-2023-39805, it is recommended to update iCMS to a version that has the SQL injection vulnerability patched.

Where can I find more information about CVE-2023-39805?

More information about CVE-2023-39805 can be found at the following references: [http://icms.com](http://icms.com), [http://icmsdev.com](http://icmsdev.com), and [https://gist.github.com/ChubbyZ/3ad434bd5fc2ab1242dd32500384cfb5](https://gist.github.com/ChubbyZ/3ad434bd5fc2ab1242dd32500384cfb5).