CVE-2023-5828

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the argument tbxUserName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243727.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Oct 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-58298.8A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by this issue is some un CVE-2023-58309.8A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authen CVE-2023-58315.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before CVE-2023-58329.1Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.CVE-2023-58338.8Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.CVE-2023-58347.8HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential f CVE-2023-58356.1A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file s CVE-2023-58369.8A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown CVE-2023-58376.1A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of th CVE-2023-58389.8Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9.CVE-2023-58397.8Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.CVE-2023-58408.8Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.