CVE-2023-49658

Summary

CVE-2023-49658 represents a significant vulnerability in Billing Software v1.0. An unauthenticated SQL injection issue exists, allowing malicious actors to inject malicious SQL statements into the 'bank_details' parameter of the party_submit.php resource without validation. These statements can manipulate the database, potentially resulting in unauthorized access, data theft, or system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.