CVE Catalog

CVE-2023-34548

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.86%

54th percentile - higher than 54% of all known CVEs

Summary

Simple Customer Relationship Management version 1.0 is vulnerable to SQL Injection via the email parameter.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to validate and sanitize input data and update the software to the latest version to mitigate the risk.

Original NVD description (English source)

Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS