CVE-2023-23565

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to retrieve PHP files from the server via Local File Inclusion.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-98

Affected software

No affected versions have been published.

Timeline

Published: Aug 22, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-235669.8A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to a CVE-2023-235678.8A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted fil CVE-2023-235685.4Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. CVE-2023-235697.8Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an CVE-2023-235708.1Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undef CVE-2023-235717.5An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request ca CVE-2023-235724.8Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an admin CVE-2023-235734.4Improper access control in the Intel(R) Unite(R) android application before Release 17 may allow a privileged user to potentially enable inf CVE-2023-235748.8A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the alerts_count component, all CVE-2023-235754.3Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction CVE-2023-235764.3Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than inten CVE-2023-235777.3Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authentica