CVE Catalog
CVE-2023-34635
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk2.08%
79th percentile - higher than 79% of all known CVEs
Summary
Wifi Soft Unibox versions 3.0 and 3.1 are vulnerable to SQL Injection. The vulnerability occurs due to the lack of validation or sanitization of user input in the username field on the login page.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.
Recommendation
It is recommended to implement validation and sanitization of user input in the username field and to update to the latest version of the software.
Original NVD description (English source)
Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.