CVE-2023-49440

HIGH

AhnLab EPP 1.0.15 - SQL Injection via Preview Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-49440. PoCs published by NyaMeeEain.

AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2023-49440, a Boolean-based SQL injection vulnerability in AhnLab EPP Management. It includes HTTP request/response examples demonstrating the exploit and the fixed behavior, but no functional exploit code.

Description

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."

Exploits (1)

nomisec WRITEUP
by NyaMeeEain · poc
https://github.com/NyaMeeEain/CVE-2023-49440

This repository provides a detailed technical analysis of CVE-2023-49440, a Boolean-based SQL injection vulnerability in AhnLab EPP Management. It includes HTTP request/response examples demonstrating the exploit and the fixed behavior, but no functional exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: AhnLab EPP Management v1.0.15 and before
Auth required
Prerequisites: Valid authentication token · Access to the vulnerable endpoint
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.0029
EPSS Percentile 20.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-89
Status published
Published Oct 27, 2025
Tracked Since Feb 18, 2026