CVE-2023-3376

Summary

CVE-2023-3376 is an SQL Injection vulnerability affecting Digital Strategy Zekiweb before version 2. An attacker can exploit this issue by injecting malicious SQL commands into input fields, potentially gaining unauthorized access to sensitive data or even taking control of the database. This vulnerability arises due to the application's failure to properly neutralize special elements used in SQL commands.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.