CVE-2024-1523
Last modified
CVE-2024-1523 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. EC-WEB FS-EZViewer(Web)'s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo privilege in the database for privilege escalation, elevating their privileges to administrator.. EPSS estimates a 0.80% chance of exploitation in the next 30 days.
Description
EC-WEB FS-EZViewer(Web)'s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo privilege in the database for privilege escalation, elevating their privileges to administrator.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| E-Web | Fs-Ezviewer | < 10.6.0.0 |
References
- https://www.twcert.org.tw/tw/cp-132-7672-7eeac-1.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-7672-7eeac-1.htmlThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-1523?
How severe is CVE-2024-1523?
How do I fix CVE-2024-1523?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-1515Rejected reason: Erroneous assignement
- CVE-2024-1516The WP eCommerce plugin for WordPress is vulnerable to unaut…5.3
- CVE-2024-1519The Paid Membership Plugin, Ecommerce, User Registration For…6.1
- CVE-2024-1520An OS Command Injection vulnerability exists in the '/open_c…9.8
- CVE-2024-1521The Elementor Website Builder Pro plugin for WordPress is vu…5.4
- CVE-2024-1522A Cross-Site Request Forgery (CSRF) vulnerability in the par…8.8
- CVE-2024-1524When the "Silent Just-In-Time Provisioning" feature is enabl…8.1
- CVE-2024-1525An issue has been discovered in GitLab CE/EE affecting all v…5.3
- CVE-2024-1526The Hubbub Lite WordPress plugin before 1.33.1 does not ens…5.3
- CVE-2024-1527Unrestricted file upload vulnerability in CMS Made Simple, a…8.8
- CVE-2024-1528CMS Made Simple version 2.2.14, does not sufficiently encode…6.1
- CVE-2024-1529Vulnerability in CMS Made Simple 2.2.14, which does not suff…6.1
Are you affected by CVE-2024-1523?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST