packetstormsecurity.com
http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-Injection.html CVE-2023-34635
CRITICAL
Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection
Record summary
CVE-2023-34635 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 22, 2024 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBWifi Soft Unibox Administration 3.0 & 3.1 - SQL InjectionExploitDB exploitby Ansh JainNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-34635 exploit-db.com
https://www.exploit-db.com/exploits/51610