CVE-2023-41636
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
CVE-2023-41636 describes a SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38, allowing attackers to access the database and execute arbitrary commands via a crafted SQL query.
Risk Assessment
The organization may be exposed to unauthorized data access and the execution of dangerous commands in the database, potentially leading to serious security consequences.
Recommendation
It is recommended to update GruppoSCAI RealGimm to the latest version that addresses this vulnerability and to implement additional security measures such as input data filtering.
Original NVD description (English source)
A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query.