CVE-2023-4708

Summary

CVE-2023-4708 is a critical vulnerability affecting Infosoftbd Clcknshop 1.0.0. The issue lies in the GET Parameter Handler's processing of the /collection/all file. Manipulation of the argument tag results in SQL injection, posing a risk for remote attacks. The vendor, Infosoftbd, was contacted regarding this disclosure but did not respond. (VDB-238571)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.