CVE-2023-4867

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Xintian Smart Table Integrated Management System 5.6.9. It has been classified as critical. Affected is an unknown function of the file /SysManage/AddUpdateSites.aspx of the component Added Site Page. The manipulation of the argument TbxSiteName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239352.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
XintianSmart Table Integrated Management System5.6.9

References

Timeline

Published
Sep 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-486707.8Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local lowCVE-2023-486717.5Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could potentially exploit thCVE-2023-486744.9Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentCVE-2023-486767.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect CCVE-2023-486777.8Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (WindoCVE-2023-486785.5Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, WCVE-2023-486795.4Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: AcroniCVE-2023-48688.8A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is CVE-2023-486805.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber ProteCVE-2023-486816.1Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (CVE-2023-486825.4Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows)CVE-2023-486837.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect C
CVE-2023-4867: High severity, CVSS 8.8 | Vulnix