CVE-2023-4835

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CF Software Oil Management Software allows SQL Injection.

This issue affects Oil Management Software: before 20230912 .

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-483505.5In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no CVE-2023-483515.5In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no CVE-2023-483525.5In phasecheckserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with CVE-2023-483534.4In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution priCVE-2023-483545.5In telephone service, there is a possible improper input validation. This could lead to local information disclosure with no additional execCVE-2023-483554.4In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemCVE-2023-483564.4In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemCVE-2023-483574.4In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemCVE-2023-483584.4In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemCVE-2023-483594.4In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service witCVE-2023-48364.3The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing uCVE-2023-483605.5in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
CVE-2023-4835: Critical severity, CVSS 9.8 | Vulnix