CVE-2023-3386

CriticalCVSS 9.8

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

40th percentile - higher than 40% of all known CVEs

Summary

The a2 Camera Trap Tracking System before version 3.1905 has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to data disclosure or modification.

Recommendation

It is recommended to upgrade the system to version 3.1905 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905.