CVE-2023-44755
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 22, 2025
Updated: Apr 23, 2025
CWE ID 89
Summary
CVE-2023-44755 is a SQL injection vulnerability affecting Sacco Management system version 1.0. The issue is located in the ajax.php file, specifically in the password parameter. An attacker can exploit this flaw by injecting malicious SQL code, potentially gaining unauthorized access to sensitive data or even taking control of the system. This vulnerability poses a significant risk to organizations using the outdated Sacco Management system and emphasizes the importance of timely software updates and input validation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.