CVE-2023-4675

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GM Information Technologies MDO allows SQL Injection.

This issue affects MDO: through 20231229. 

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
GM Information TechnologiesMDO<= 20231229

References

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-467506.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to CVE-2023-467517.5An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to cCVE-2023-467525.9An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.CVE-2023-467535.9An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.gCVE-2023-467545.3The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.CVE-2023-467555.3Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launCVE-2023-467565.3Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up wCVE-2023-467577.5The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of this vulnerability CVE-2023-467587.5Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service CVE-2023-467597.5Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-46766.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yordam MedasPro allows Reflected XSS. CVE-2023-467607.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.