CVE-2023-1321

A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class.php. The manipulation of the argument id with the input -1 and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222727.

• CWE-89

• https://vuldb.com/?ctiid.222727Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222727Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.222727Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222727Permissions Required, Third Party Advisory

Published

Mar 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1315Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
• CVE-2023-1316Cross-site Scripting (XSS) - Stored in GitHub repository ost…5.4
• CVE-2023-1317Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
• CVE-2023-1318Cross-site Scripting (XSS) - Generic in GitHub repository os…5.4
• CVE-2023-1319Cross-site Scripting (XSS) - Stored in GitHub repository ost…4.8
• CVE-2023-1320Cross-site Scripting (XSS) - Stored in GitHub repository ost…6.1
• CVE-2023-1322A vulnerability was found in lmxcms 1.41 and classified as c…9.8
• CVE-2023-1323The Easy Forms for Mailchimp WordPress plugin before 6.8.9 d…4.8
• CVE-2023-1324The Easy Forms for Mailchimp WordPress plugin before 6.8.8 d…6.1
• CVE-2023-1325The Easy Forms for Mailchimp WordPress plugin before 6.8.7 d…5.4
• CVE-2023-1326A privilege escalation attack was found in apport-cli 2.26.0…7.8
• CVE-2023-1327Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affec…9.8