CVE-2023-49625

Summary

CVE-2023-49625 is a vulnerability affecting Billing Software v1.0. The issue involves unauthenticated SQL injection, where the 'id' parameter in the partylist_edit_submit.php resource fails to validate user input. This oversight allows malicious actors to inject malicious SQL queries, which can result in unauthorized access, information disclosure, or even system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.