CVE-2023-3801

A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. Affected by this vulnerability is the function actionEdit of the file ?r=officialdoc/officialdoc/edit of the component Mobile Notification Handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-235069 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89
• CWE-89

• https://github.com/Wkingxc/CVE/blob/master/ibos_OA_1.mdBroken Link
• https://github.com/funnn7/cve/blob/main/sql.mdBroken Link
• https://vuldb.com/?ctiid.235069Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235069Third Party Advisory
• https://github.com/Wkingxc/CVE/blob/master/ibos_OA_1.mdBroken Link
• https://github.com/funnn7/cve/blob/main/sql.mdBroken Link
• https://vuldb.com/?ctiid.235069Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235069Third Party Advisory

Published

Jul 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38001IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site re…6.5
• CVE-2023-38002IBM Storage Scale 5.1.0.0 through 5.1.9.2 could allow an aut…8.8
• CVE-2023-38003IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Se…7.2
• CVE-2023-38005IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and…4.3
• CVE-2023-38007IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Powe…5.4
• CVE-2023-38009IBM Cognos Mobile Client 1.1 iOS may be vulnerable to inform…5.9
• CVE-2023-38010IBM Cloud Pak System displays sensitive information in user …7.5
• CVE-2023-38012IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, …5.3
• CVE-2023-38013IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.…7.5
• CVE-2023-38017IBM Cloud Pak System is vulnerable to cross-site scripting. …5.3
• CVE-2023-38018IBM Aspera Shares 1.10.0 PL2 does not invalidate session aft…5.4
• CVE-2023-38019IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow a r…6.5