CVE-2023-43013

9.8 criticalEPSS 0.9%

Critical (9.8) in projectworlds asset management system. EPSS 0.9% chance of exploitation in the next 30 days.

Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-09-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

projectworlds:asset_management_system

References

https://fluidattacks.com/advisories/nergal
https://projectworlds.in/
https://fluidattacks.com/advisories/nergal
https://projectworlds.in/

Check your stack JSON