CVE-2023-27167

Mô tả

Tham khảo

• biostar2.ciklum.net/api/users/absence · Broken Link
• packetstormsecurity.com/files/171523/Suprema-BioStar-2-2.8.16-SQL-Injection.html · Exploit
• protey.net/threads/cve-2023-27167-suprema-biostar-2-v2-8-16-sql-injection.995 · Exploit
• linkedin.com/in/yuriy-tsarenko-a1453aa4 · Permissions Required

Lỗ hổng khác của biostar 2

• CVE-2023-33366CAO 8.8A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives …
• CVE-2023-33365CAO 7.5A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files fro…
• CVE-2023-33364CAO 8.8An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS co…
• CVE-2023-33363CAO 7.5An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functiona…
• CVE-2023-31923CAO 8.8Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker w…