CVE-2023-2773

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file view_admin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229279.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 17, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-277307.5Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c.CVE-2023-277337.2DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php.CVE-2023-277345.5An issue found in Eteran edb-debugger v.1.3.0 allows a local attacker to causea denial of service via the collect_symbols function in pluginCVE-2023-277396.1easyXDM 2.5 allows XSS via the xdm_e parameter.CVE-2023-27749.8A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this issue is somCVE-2023-277429.8IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login.CVE-2023-277447.8An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remotCVE-2023-277458.8An issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attackers with low-level privileges to perform Administrative actionCVE-2023-277469.8BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force CVE-2023-277477.5BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access seCVE-2023-277489.8BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload craftCVE-2023-27758.8A vulnerability was found in code-projects Bus Dispatch and Information System 1.0. It has been classified as critical. This affects an unkn