CVE-2023-6575

A vulnerability was found in Byzoro S210 up to 20231121. It has been classified as critical. This affects an unknown part of the file /Tool/repair.php of the component HTTP POST Request Handler. The manipulation of the argument txt leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247155. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• https://github.com/houhuidong/cve/blob/main/rce.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.247155Third Party Advisory
• https://vuldb.com/?id.247155Third Party Advisory
• https://vuldb.com/?submit.241692
• https://github.com/houhuidong/cve/blob/main/rce.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.247155Third Party Advisory
• https://vuldb.com/?id.247155Third Party Advisory
• https://vuldb.com/?submit.241692

Published

Dec 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6569External Control of File Name or Path in h2oai/h2o-38.2
• CVE-2023-6570Server-Side Request Forgery (SSRF) in kubeflow/kubeflow6.5
• CVE-2023-6571Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow6.1
• CVE-2023-6572Command Injection in GitHub repository gradio-app/gradio pri…8.1
• CVE-2023-6573HPE OneView may have a missing passphrase during restore.5.5
• CVE-2023-6574A vulnerability was found in Byzoro Smart S20 up to 20231120…8.8
• CVE-2023-6576A vulnerability was found in Byzoro S210 up to 20231123. It …8.8
• CVE-2023-6577A vulnerability was found in Byzoro PatrolFlow 2530Pro up to…4.3
• CVE-2023-6578A vulnerability classified as critical has been found in Sof…6.5
• CVE-2023-6579A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-6580A vulnerability, which was classified as critical, was found…8.8
• CVE-2023-6581A vulnerability has been found in D-Link DAR-7000 up to 2023…9.8