CVE-2023-3100
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A critical vulnerability has been found in IBOS version 4.5.5, affecting the actionDel function in the file ?r=dashboard/approval/del. Manipulation of the argument id leads to SQL injection.
Risk Assessment
This vulnerability could be exploited by attackers to gain control over the database, posing a serious threat to the organization's data security.
Recommendation
It is recommended to immediately update the IBOS system to the latest version to eliminate this vulnerability and to monitor the system for unauthorized activities.
Original NVD description (English source)
A vulnerability, which was classified as critical, has been found in IBOS 4.5.5. Affected by this issue is the function actionDel of the file ?r=dashboard/approval/del. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-230690 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.