CVE-2023-39806: SQL Injection
Published Aug 10, 2023
·Updated
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.
Affected Software
1 affected component
idreamsoft iCMS=7.0.16
Event History
Aug 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for the SQL injection vulnerability in iCMS v7.0.16?
The vulnerability ID for the SQL injection vulnerability in iCMS v7.0.16 is CVE-2023-39806.
2
What is the severity rating of CVE-2023-39806?
CVE-2023-39806 has a severity rating of 9.8 (Critical).
3
How does the SQL injection vulnerability in iCMS v7.0.16 occur?
The SQL injection vulnerability in iCMS v7.0.16 occurs via the bakupdata function.
4
Which version of iCMS is affected by the SQL injection vulnerability?
The SQL injection vulnerability affects iCMS version 7.0.16.
5
How can the SQL injection vulnerability in iCMS v7.0.16 be fixed?
To fix the SQL injection vulnerability in iCMS v7.0.16, it is recommended to update to a patched version provided by Idreamsoft.