CVE-2023-33592

CriticalCVSS 9.8

Published: 28/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.93%

77th percentile - higher than 77% of all known CVEs

Summary

The Lost and Found Information System v1.0 was found to contain a SQL injection vulnerability in the component /php-lfis/admin/?page=system_info/contact_information.

Risk Assessment

This vulnerability could allow attackers to access sensitive data in the database, potentially leading to serious security breaches.

Recommendation

It is recommended to update the system to the latest version and implement input validation to prevent SQL injection.

Original NVD description (English source)

Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_information.