8.8
High
CVE-2023-4092 SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version
Description
SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data (insert/update/delete), perform database administration operations and, in some cases, execute commands on the operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Arconte Áurea 1.5 | earliest → < 1.5.0.0 | 1.5.0.0 |
Other CVEs of Arconte Áurea
The 5 CVEs of Arconte Áurea →
CVE-2023-4096
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could…
8.6
High
CVE-2023-4095
User enumeration vulnerability in Arconte Áurea 1.5.0.0 version
5.3
Medium
CVE-2023-4094
ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests…
6.5
Medium
CVE-2023-4093
Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version
5.5
Medium