CVE-2023-31719

FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

• CWE-89

• https://github.com/MateusTesser/CVE-2023-31719Third Party Advisory
• https://github.com/frangoteam/FUXAProduct
• https://youtu.be/cjb2KYpV6dYExploit, Third Party Advisory
• https://github.com/MateusTesser/CVE-2023-31719Third Party Advisory
• https://github.com/frangoteam/FUXAProduct
• https://youtu.be/cjb2KYpV6dYExploit, Third Party Advisory

Published

Sep 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3171A flaw was found in EAP-7 during deserialization of certain …7.5
• CVE-2023-31710TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)…9.8
• CVE-2023-31714Chitor-CMS before v1.1.2 was discovered to contain multiple …9.8
• CVE-2023-31716FUXA <= 1.1.12 has a Local File Inclusion vulnerability via …7.5
• CVE-2023-31717A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration…7.5
• CVE-2023-31718FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api…7.5
• CVE-2023-3172Path Traversal in GitHub repository froxlor/froxlor prior to…7.2
• CVE-2023-31722There exists a heap buffer overflow in nasm 2.16.02rc1 (GitH…7.8
• CVE-2023-31723yasm 1.3.0.55.g101bc was discovered to contain a segmentatio…5.5
• CVE-2023-31724yasm 1.3.0.55.g101bc was discovered to contain a segmentatio…7.8
• CVE-2023-31725yasm 1.3.0.55.g101bc was discovered to contain a heap-use-af…5.5
• CVE-2023-31726AList 3.15.1 is vulnerable to Incorrect Access Control, whic…7.5