NetSight
critical9.8

CVE-2023-26784

SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_comm…

Impact

SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter.

Affected products

VendorProductAffected versions
TosecKirin Fortress Machine
Version 1.7-2020-0610

Weakness classification

References