CVE-2023-2107

A vulnerability, which was classified as critical, was found in IBOS 4.5.5. Affected is an unknown function of the file file/personal/del&op=recycle. The manipulation of the argument fids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226110 is the identifier assigned to this vulnerability.

• CWE-89
• CWE-89

• https://github.com/MuRKuo/cve/blob/main/ibos%20oa%20sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.226110Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226110Third Party Advisory
• https://github.com/MuRKuo/cve/blob/main/ibos%20oa%20sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.226110Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226110Third Party Advisory

Published

Apr 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21064In DoSetPinControl of miscservice.cpp, there is a possible o…6.7
• CVE-2023-21065In fdt_next_tag of fdt.c, there is a possible out of bounds …6.7
• CVE-2023-21066In cd_CodeMsg of cd_codec.c, there is a possible out of boun…9.8
• CVE-2023-21067Product: AndroidVersions: Android kernelAndroid ID: A-254114…7.5
• CVE-2023-21068In (TBD) of (TBD), there is a possible way to boot with a hi…7.8
• CVE-2023-21069In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possib…6.7
• CVE-2023-21070In add_roam_cache_list of wl_roam.c, there is a possible out…6.7
• CVE-2023-21071In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a po…6.7
• CVE-2023-21072In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible ou…6.7
• CVE-2023-21073In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible ou…6.7
• CVE-2023-21075In get_svc_hash of nan.cpp, there is a possible out of bound…6.7
• CVE-2023-21076In createTransmitFollowupRequest of nan.cpp, there is a poss…6.7