CVE-2023-3237

A vulnerability classified as critical was found in OTCMS up to 6.62. This vulnerability affects unknown code. The manipulation of the argument username/password with the input admin leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231508.

• CWE-259
• CWE-798

• https://github.com/HuBenLab/HuBenVulList/blob/main/OTCMS%20contains%20a%20weak%20default%20password%20which%20gives%20attackers%20to%20access%20backstage%20management%20system.mdExploit
• https://vuldb.com/?ctiid.231508Permissions Required, Third Party Advisory
• https://vuldb.com/?id.231508Third Party Advisory
• https://github.com/HuBenLab/HuBenVulList/blob/main/OTCMS%20contains%20a%20weak%20default%20password%20which%20gives%20attackers%20to%20access%20backstage%20management%20system.mdExploit
• https://vuldb.com/?ctiid.231508Permissions Required, Third Party Advisory
• https://vuldb.com/?id.231508Third Party Advisory

Published

Jun 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32364A logic issue was addressed with improved restrictions. This…8.6
• CVE-2023-32365The issue was addressed with improved checks. This issue is …2.4
• CVE-2023-32366An out-of-bounds write issue was addressed with improved inp…7.8
• CVE-2023-32367This issue was addressed with improved entitlements. This is…5.5
• CVE-2023-32368An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2023-32369A logic issue was addressed with improved state management. …6
• CVE-2023-32370A logic issue was addressed with improved validation. This i…5.3
• CVE-2023-32371The issue was addressed with improved checks. This issue is …6.3
• CVE-2023-32372An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2023-32373A use-after-free issue was addressed with improved memory ma…8.8
• CVE-2023-32375An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2023-32376This issue was addressed with improved entitlements. This is…5.5