CoreCVE
Back

CRITICAL

A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server's root directory, resulting in remote code execution

Published Aug 5, 2023

Description

A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server's root directory, resulting in remote code execution.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 5, 2023
Updated Oct 17, 2024
Reserved May 22, 2023
Link CVE-2023-33367
CISA Vulnrichment
Updated Oct 17, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-33367
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-33367