CVE-2023-39853: SQL Injection

Published Jan 6, 2024

Updated

SQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain sensitive information via the doobj and doevent parameters in the Network Disk backend module.

Affected Software

1 affected component

dzzoffice DzzOffice=2.01

Event History

Jan 6, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-39853?

CVE-2023-39853 has been categorized as a critical severity vulnerability due to its potential for data exposure.

How does CVE-2023-39853 affect Dzzoffice?

CVE-2023-39853 allows remote attackers to exploit the SQL injection vulnerability in the Network Disk backend module of Dzzoffice version 2.01.

How do I fix CVE-2023-39853?

To mitigate CVE-2023-39853, upgrade Dzzoffice to the latest version and validate input parameters to prevent SQL injection.

What are the affected components in CVE-2023-39853?

CVE-2023-39853 specifically affects the doobj and doevent parameters in the Network Disk backend module of Dzzoffice 2.01.

Can CVE-2023-39853 be exploited remotely?

Yes, CVE-2023-39853 can be exploited remotely by attackers to obtain sensitive information.