CVE-2023-1322

A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1) and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222728.

• CWE-89

• https://vuldb.com/?ctiid.222728Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222728Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.222728Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222728Permissions Required, Third Party Advisory

Published

Mar 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1316Cross-site Scripting (XSS) - Stored in GitHub repository ost…5.4
• CVE-2023-1317Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
• CVE-2023-1318Cross-site Scripting (XSS) - Generic in GitHub repository os…5.4
• CVE-2023-1319Cross-site Scripting (XSS) - Stored in GitHub repository ost…4.8
• CVE-2023-1320Cross-site Scripting (XSS) - Stored in GitHub repository ost…6.1
• CVE-2023-1321A vulnerability has been found in lmxcms 1.41 and classified…9.8
• CVE-2023-1323The Easy Forms for Mailchimp WordPress plugin before 6.8.9 d…4.8
• CVE-2023-1324The Easy Forms for Mailchimp WordPress plugin before 6.8.8 d…6.1
• CVE-2023-1325The Easy Forms for Mailchimp WordPress plugin before 6.8.7 d…5.4
• CVE-2023-1326A privilege escalation attack was found in apport-cli 2.26.0…7.8
• CVE-2023-1327Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affec…9.8
• CVE-2023-1328A vulnerability was found in Guizhou 115cms 4.2. It has been…7.2