CVE-2023-26922

Published March 8th, 2023

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shell_exect parameter to the \www\pages\matrix-gui-2.0 endpoint.

varigit/matrix-gui-v2

Backup for TI matrix-gui-v2 ( https://gitorious.org/matrix-gui-v2/matrix-gui-v2.git )

GitHub