CVE-2023-34476
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
CVE-2023-34476 vulnerability concerns improper neutralization of special elements used in SQL commands, allowing for SQL Injection attacks.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data disclosure or modification.
Recommendation
It is recommended to implement proper input validation and sanitization mechanisms to prevent SQL Injection attacks.
Other vulnerabilities in Baza danych
See all- CVE-2026-6888High
Exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling access, modification, or deletion of sensitive information within the database.
- CVE-2023-38044Critical
CVE-2023-38044 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.