CVE-2023-3793

A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc.class of the component HTTP POST Request Handler. The manipulation of the argument fileid with the input 1+WAITFOR+DELAY leads to sql injection. Upgrading to version 10.58.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-235061 was assigned to this vulnerability.

• CWE-89

• https://vuldb.com/?ctiid.235061Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235061Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.235061Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235061Permissions Required, Third Party Advisory

Published

Jul 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37924Apache Software Foundation Apache Submarine has an SQL injec…9.8
• CVE-2023-37925An improper privilege management vulnerability in the debug …5.5
• CVE-2023-37926A buffer overflow vulnerability in the Zyxel ATP series firm…5.5
• CVE-2023-37927The improper neutralization of special elements in the CGI p…8.8
• CVE-2023-37928A post-authentication command injection vulnerability in the…8.8
• CVE-2023-37929The buffer overflow vulnerability in the CGI program of the …6.5
• CVE-2023-37930Multiple issues including the use of uninitialized ressource…8.8
• CVE-2023-37931An improper neutralization of special elements used in an sq…8.8
• CVE-2023-37932An improper limitation of a pathname to a restricted directo…6.5
• CVE-2023-37933An improper neutralization of input during web page generati…6.1
• CVE-2023-37934An allocation of resources without limits or throttling vuln…6.5
• CVE-2023-37935A use of GET request method with sensitive query strings vul…7.5