CVE-2023-33179 (xibo) | allinfosecnews.com

May 30, 2023, 9:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.5 in the `nameFilter` function used throughout the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values for logical operators. Users should upgrade to version 3.3.5 which fixes this issue. There are no known workarounds aside from upgrading.

cms cve data database exfiltrate data fixes function injection management sql sql injection system upgrade version vulnerability

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Security Operations Engineer

@ Nokia | India

View on infosec-jobs.com

Machine Learning DevSecOps Engineer

@ Ford Motor Company | Mexico City, MEX, Mexico

View on infosec-jobs.com

Cybersecurity Defense Analyst 2

@ IDEMIA | Casablanca, MA, 20270

View on infosec-jobs.com

Executive, IT Security

@ CIMB | Cambodia

View on infosec-jobs.com

Cloud Security Architect - Microsoft (m/w/d)

@ Bertelsmann | Gütersloh, NW, DE, 33333

View on infosec-jobs.com

Senior Consultant, Cybersecurity - SOC

@ NielsenIQ | Chennai, India

View on infosec-jobs.com