CVE-2023-27779

CriticalCVSS 9.8

Published: 13/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.98%

58th percentile - higher than 58% of all known CVEs

Summary

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability in the login form. An attacker can manipulate the 'user' parameter to execute unauthorized database queries.

Risk Assessment

The risk includes unauthorized database access, sensitive data leakage, and potential system takeover.

Recommendation

Immediately update AM Presencia to the latest version and implement parameterized SQL queries in the login form.

Original NVD description (English source)

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form.