CVE-2023-4713

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function addComment of the file ?r=weibo/comment/addcomment. The manipulation of the argument touid leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238576. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• https://github.com/13aiZe1/cve/blob/main/sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.238576Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.238576Third Party Advisory, VDB Entry
• https://github.com/13aiZe1/cve/blob/main/sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.238576Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.238576Third Party Advisory, VDB Entry

Published

Sep 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47124Traefik is an open source HTTP reverse proxy and load balanc…5.9
• CVE-2023-47125TYPO3 is an open source PHP based web content management sys…6.1
• CVE-2023-47126TYPO3 is an open source PHP based web content management sys…5.3
• CVE-2023-47127TYPO3 is an open source PHP based web content management sys…5.4
• CVE-2023-47128Piccolo is an object-relational mapping and query builder wh…9.1
• CVE-2023-47129Statmic is a core Laravel content management system Composer…9.8
• CVE-2023-47130Yii is an open source PHP web framework. yiisoft/yii before …9.8
• CVE-2023-47131The N-able PassPortal extension before 3.29.2 for Chrome ins…7.5
• CVE-2023-47132An issue discovered in N-able N-central before 2023.6 and ea…9.8
• CVE-2023-4714A vulnerability was found in PlayTube 3.0.1 and classified a…7.5
• CVE-2023-47140IBM CICS Transaction Gateway 9.3 could allow a user to trans…8.1
• CVE-2023-47141IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect S…6.5