CVE-2023-34635

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jul 31, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-346375.4A stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scrip CVE-2023-34646.1A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected is an unknown funct CVE-2023-346417.8KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issu CVE-2023-346427.8KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issu CVE-2023-346449.8Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S193 CVE-2023-346457.5jfinal CMS 5.1.0 has an arbitrary file read vulnerability.CVE-2023-346476.1PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-346486.1A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local a CVE-2023-34656.1A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability CVE-2023-346506.1PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-346516.1PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-346526.1PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.