CVE-2023-39807

Summary

CVE-2023-39807 refers to a SQL injection vulnerability found in N.V.K.INTER CO., LTD.'s iBSG v3.5. The flaw lies within the user-register.php file, specifically the a_passwd parameter. An attacker can exploit this vulnerability by injecting malicious SQL commands, potentially gaining unauthorized access to sensitive data or even taking control of the affected system. This issue poses a significant risk, making it crucial for users to apply the necessary patches or upgrades to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.