CVE-2023-3688

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the component GET Parameter Handler. The manipulation of the argument keywords/gender leads to sql injection. It is possible to launch the attack remotely. VDB-234234 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-368804.8Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2023-368814.5Azure Apache Ambari Spoofing VulnerabilityCVE-2023-368828.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2023-368834.3Microsoft Edge for iOS Spoofing VulnerabilityCVE-2023-368847.5Windows Search Remote Code Execution VulnerabilityCVE-2023-368865.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-368877.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2023-368886.3Microsoft Edge for Android (Chromium-based) Tampering VulnerabilityCVE-2023-368895.5Windows Group Policy Security Feature Bypass VulnerabilityCVE-2023-36899.8A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7. Affected by this vulnerability is an unknown functionality of thCVE-2023-368906.5Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2023-368918.0Microsoft SharePoint Server Spoofing Vulnerability