CVE-2023-4545
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A critical vulnerability was found in IBOS OA version 4.5.5, allowing SQL injection through manipulation of the file ?r=recruit/bgchecks/export&checkids=x.
Risk Assessment
This vulnerability enables remote attacks, potentially leading to unauthorized access to the database and leakage of sensitive information.
Recommendation
It is recommended to immediately update the IBOS OA system to the latest version to mitigate this vulnerability and monitor the system for unauthorized activities.
Original NVD description (English source)
A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is an unknown function of the file ?r=recruit/bgchecks/export&checkids=x. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.