CVE-2023-36361

CriticalCVSS 9.8

Published: 05/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.62%

45th percentile - higher than 45% of all known CVEs

Summary

Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter. An attacker can manipulate database queries, potentially leading to unauthorized data access.

Risk Assessment

The risk includes potential leakage of sensitive data, modification or deletion of database records, which may compromise system integrity and confidentiality.

Recommendation

It is recommended to immediately update Audimexee to the latest version and implement input validation for the p_table_name parameter to prevent SQL injection attacks.

Original NVD description (English source)

Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter.