CVE-2023-1742

8.8 highEPSS 0.7%

High (8.8) in ibos ibos. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-224630 is the identifier assigned to this vulnerability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-03-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibos:ibos

References

https://gitee.com/wkstestete/cve/blob/master/sql/ibos%20sql%20injection3.md
https://vuldb.com/?ctiid.224630
https://vuldb.com/?id.224630
https://gitee.com/wkstestete/cve/blob/master/sql/ibos%20sql%20injection3.md
https://vuldb.com/?ctiid.224630

Check your stack JSON