CVEvulnerability
CVE-2023-34635
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-07-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.
Affected configurations
• wifi-soft unibox administration 3.0
• wifi-soft unibox administration 3.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/51610 Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/51610 Exploit, Third Party Advisory, VDB Entry