CVE-2023-39806

CriticalCVSS 9.8

Published: 10/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

Summary

A SQL injection vulnerability was discovered in iCMS v7.0.16 within the bakupdata function. Attackers can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk involves potential theft, modification, or deletion of database data, compromising the confidentiality and integrity of organizational information.

Recommendation

Immediately update iCMS to the latest available version that includes a fix for this vulnerability. Additionally, implement web application firewalls and input validation.

Original NVD description (English source)

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.