Record summary

CVE-2023-34635 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 22, 2024 · Source: CVE List

Proofs of concept

1

Catalogued exploits

ExploitDBWifi Soft Unibox Administration 3.0 & 3.1 - SQL InjectionExploitDB exploitby Ansh JainNot analyzed1 file
ExploitDB

PoC details

References

3