CVE-2023-4873

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability.

• CWE-78

• https://github.com/cugerQDHJ/cve/blob/main/rce.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.239358Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239358Permissions Required, Third Party Advisory
• https://vuldb.com/?submit.204279
• https://github.com/cugerQDHJ/cve/blob/main/rce.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.239358Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239358Permissions Required, Third Party Advisory
• https://vuldb.com/?submit.204279

Published

Sep 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48724A memory corruption vulnerability exists in the web interfac…7.5
• CVE-2023-48725A stack-based buffer overflow vulnerability exists in the JS…8.8
• CVE-2023-48726Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-48727NULL pointer dereference in some Intel(R) oneVPL software be…3.3
• CVE-2023-48728A cross-site scripting (xss) vulnerability exists in the fun…6.1
• CVE-2023-48729Rejected reason: This is unused.
• CVE-2023-48730A cross-site scripting (xss) vulnerability exists in the nav…5.4
• CVE-2023-48732Mattermost fails to scope the WebSocket response around noti…4.3
• CVE-2023-48733An insecure default to allow UEFI Shell in EDK2 was left ena…6.7
• CVE-2023-48734Rejected reason: This is unused.
• CVE-2023-48736In International Color Consortium DemoIccMAX 3e7948b, CIccCL…6.5
• CVE-2023-48737Improper Neutralization of Input During Web Page Generation …4.8