CVE-2023-26784

SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-03-16

Last modified

2025-02-26

Weaknesses

CWE-89

Affected products

• Kirin Fortress Machine (Tosec)

References

• https://gist.github.com/yinfei6/b13e7527887ac0eb809fa0b6f36305e1
• https://www.tosec.com.cn