CVE-2023-39805

Summary

CVE-2023-39805 is a newly identified SQL injection vulnerability affecting version 7.0.16 of iCMS. An attacker can exploit this flaw by injecting malicious SQL code through the "where" parameter in the admincp.php file. This vulnerability poses a significant risk, as SQL injection attacks can grant unauthorized access to sensitive data or even allow an attacker to take control of the affected system. It is recommended that users of iCMS version 7.0.16 apply the latest security patch as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.