CVE-2023-29809

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-05-12

Last modified

2025-01-24

Weaknesses

CWE-89

Affected products

• Companymaps (Companymaps Project)

References

• https://github.com/zPrototype/CVE-2023-29809
• https://packetstormsecurity.com/files/172146/Companymaps-8.0-SQL-Injection.html
• https://www.exploit-db.com/exploits/51422