CVE-2023-3522

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 License Portal System allows SQL Injection.

This issue affects License Portal System: before 1.48.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Aug 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-35237.1Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.CVE-2023-35246.1The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-CVE-2023-35257.5The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' CVE-2023-35269.6In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthCVE-2023-35276.8A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with adminiCVE-2023-35289.8A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of CVE-2023-35297.5A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the filCVE-2023-352966.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-352978.1Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityCVE-2023-352987.5HTTP.sys Denial of Service VulnerabilityCVE-2023-352997.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-353008.8Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2023-3522: Critical severity, CVSS 9.8 | Vulnix